kerberos: Allocate memory for the output token if requested.