s4-auth: Use smb_krb5_make_pac_checksum.