s4:gensec Rework gensec_krb5 mutual authentication defaults