return_pw_salt also appears to ignore the contents of the salt for
ONLYREALM, and just fills in the realm of the requested principal.