s4-heimdal: implement KERB_AP_ERR_TYPE_SKEW_RECOVERY