krb5: crypto.c avoid realloc to trim memory allocation