s4-auth-krb: Move function into more appropriate header.