HEIMDAL:lib/krb5: Harden ARCFOUR_sub{en,de}crypt()