s4:kdc: Rename authn_kerberos_client_policy::tgt_lifetime to tgt_lifetime_raw