Fix PKINIT two-component matching rule parsing

In pkinit_matching.c:parse_rule_set(), apply the default relation when
parsing the second component of a rule, not the third.  Otherwise we
apply no default relation to two-component matching rules, effectively
reducing such rules to their second components.  Reported by Sumit
Bose.

(cherry picked from commit 67ae7bbe1ea7032d1cb79682be3a14e7e13ec64f)

https://github.com/krb5/krb5/commit/eb54f32ec84f945f1857bc289ca7ea37524424bb
Author: Greg Hudson <ghudson@mit.edu>
Commit: eb54f32ec84f945f1857bc289ca7ea37524424bb
Branch: krb5-1.15
 src/plugins/preauth/pkinit/pkinit_matching.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)