kdc: Provide extended error information in AS-REP error replies.