password_lockout: test creds.get_kerberos_state()