s4-krb5: authkrb5 should depend on ldb