libkrb5 1.18 and above may now concatenate the DNS search path to single path hostnames during canonicalization. We should disable this in our mock configuration, because we want to maintain tight control over hostname selection. To do this, we should set qualify_shortname to the empty string.