krb5: allow NULL authenticator in krb5_auth_con_free()