s4-kdc: use IDL constant NETLOGON_GENERIC_KRB5_PAC_VALIDATE