configure: fix Kerberos flagging for --with-krb5[=check]