waf: check for krb5_create_checksum and krb5_creds.flags for some Heimdal versions