Request forwardable service tickets

I think this doesn't actually do anything harmful and will allow us to
do GSSAPIDelegateCredentials in shell-in-a-box; as far as I can tell,
it's only relevant for a TGT and just lets you change the IP address.