s3-kerberos: add aes enctypes to generated krb5.conf.