s3-kerberos: support S4U2SELF impersionation through cli_krb5_get_ticket().