whatsnew: announce removal of DES encryption type in Kerberos