krb5wrap: Move mask to the right position.