auth/kerberos: Fall back to gsskrb5_get_subkey if we did not get the key type