s4-auth: Use smb_krb5_cc_get_lifetime() wrapper.