Add support for relocating krb5.conf and remove DES

This is useful for deploying on environments where something like Centrify or Quest owns /etc/krb5.conf. Also, straight up DES should die in a fire.