s3-kerberos: modify cli_krb5_get_ticket to take a new impersonate_princ_s arg.