ipa-kdb: issue PAC_REQUESTER_SID only for TGTs
    
    MS-KILE 3.3.5.6.4.8 in revision after Windows Server November 2021
    security fixes added the following requirement:
    
    - PAC_REQUESTER_SID is only added in TGT case (including referrals and
      tickets to RODCs)
    
    Fixes: https://pagure.io/freeipa/issue/9031
    
    Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>