move krb5_generate_subkey to deprecated and provide doxygen