Master krb5 1.11.4 final

I rebased our work on top of the most recent stable release. Can we delete master and replace it with this new branch?

Note: don't actually approve this pull request.