s3:winbindd: rely on the kerberos_state from pdb_get_trust_credentials()