use krb5_cc_get_lifetime