libcli: use cli_credentials_failed_kerberos_login() to cope with server changes