Love points out that our KDC also rejects the disabled transited check option which it does understand. Fixing this bug should fix that issue as well. I have marked for inclusion in 1.3.