fix if w/empty statement
enforce KERBEROS5 for lib/Makefile, too
missing free; found by leakmalloc