UserPrincipalName with ntlm_auth, trying to get it "right"