s4:kdc: Add singular out path to samba_kdc_update_pac_blob()