auth: Explain why GSS_KRB5_CRED_NO_CI_FLAGS_X is needed