Use krb5_enomem() more consistently in lib/krb5.