Add krb5_allow_weak_crypto API to enable weak enctypes