This reverts commit 1b7e196e66. It turns out that, contrary to the referrals draft, Windows does not canonicalize enterprise principal names if the canonicalize KDC option is unset.
1b7e196e66