tests/krb5: Allow excluding the PAC server checksum