lib/krb5: add krb5_mk_error_ext() helper function