Replace i_vector with cstate in auth context

Use a proper cipher state in the auth context structure, and simplify
mk_priv/rd_priv accordingly.  krb5_auth_con_setivector still needs to
guess the length using a temporary cipher state.