s4-auth-krb: Move keytab functions in a separate file.