move krb5_generate_random() to krb5_init_context() and document (in doxygen) why its called