clikrb5: don't use krb5_keyblock_init() when no salt is specified