Rename pairmove2 pairfilter
The big WARNING: should be enough indentation
krb5_kt_close doesn't check for NULL pointers, so we have to