password_hash: add generation of the Primary:Kerberos-Newer-Keys blob