CVE-2022-2031 s4:kpasswd: Don't return AP-REP on failure