s4-auth: fixed infinite loop in krb5 auth