undrop: limit the length of password. (Fixes a crash.)
krb5: ensure that username and realm are non-empty. (Fixes SIGFPE.)