userok: Allow NULL components in kerberosSuperUser