don't free armor_ccache, since krb5_cc are not yet ref counted