s4:auth/kerberos: add S4U2Proxy support to kerberos_kinit_password_cc()