Capture failures from krb5_cc_get_principal()