Don't mask authentication failure details.

These changes should make it easier to debug
kerberos configuration issues on the client
and server.