s4:s3compat Add implementation of kerberos_return_pac()