libnetjoin: support kerberized joining/unjoing (fix #5416).