s3-kerberos: do not include authdata headers before including krb5 headers.