Treat KRB5_BAD_ENCTYPE as invalid password

Treat an KRB5_BAD_ENCTYPE error as an incorrect password, since this
error is returned by a Heimdal 1.6-rc2 KDC for incorrect preauth from
a MIT Kerberos 1.12.1 client.