more comments about how useful krb5_generate_random_block() is