lib/krb5: build_logon_name use common 'out' do not leak 's2'