s4:kdc: implement samba_kdc_check_s4u2proxy()