s4:kdc: split the kdc_tcp_proxy() logic from the main kdc logic