libcli/auth/krb5_wrap: correctly use discard_const().