HEIMDAL:lib/krb5: move checksum vs. enctype checks into get_checksum_key()