auth/kerberos Move all the PAC handling functions to auth/kerberos