kdc: base _kdc_fast_mk_error() on krb5_mk_error_ext()