krb5_build_authenticator is private