waf: move krb5 checks to a separate waf file