auth/credentials-krb5: use get_kerberos_allowed_etypes().