goaidentity: don't leak credentials caches

krb5_cc_default doesn't return a shared resource, and
the results need to be freed. Likewise,
get_new_credentials_cache needs to be freed.

https://bugzilla.gnome.org/show_bug.cgi?id=729874