s3-waf: Use a common subsystem for the kerberos client code