Filter out constrained delegation ACL from KDB entry
    
    Commit f78dc0b163 was missing an exception for the constrained
    delegation ACL TL data type during the principal entry update operation.
    This ACL is not meant to be stored as encoded data in krbExtraData.
    
    Signed-off-by: Julien Rische <jrische@redhat.com>
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>