Funny krb5 clone URL has port and empty username

Summary

Our gitlab instance shows "https://:@[our-gitlab-host]:443/group/project.git" as the clone URL under "KRB5". This is funny because:

1. 443 is the default port for SSL, so there is no need to add it, and
2. We don't need ":@" because our clients have http.emptyauth=auto. Admittedly, not everyone has this, but it would be nice to be able to tell gitlab that we don't need the funny auth gubbins.

What is the expected correct behavior?

I would expect to see:

"https://[our-gitlab-host]/group/project.git"

(and indeed, cloning this URL works fine).

Results of GitLab environment info

9.5.6-ee