s4-kerberos Move 'set key into keytab' code out of credentials.