r4893: Move to using secrets.ldb for the Kerberos verify, instead of