s3: use pidl to pull a KRB5_EDATA_NTSTATUS.