krb5: always generate the acceptor subkey as the same enctype as the used service key