Use the trust password version as kvno for trusts in Kerberos.