lib/replace: make sure krb5_cc_default[_name]() is no longer used directly