s4-auth: avoid double free of krb5 kt_entries when compiling with MIT kerberos library.