lib/krb5: akf_add_entry do not leak 'fd'