krb5: Use zap_free() after we encoded the ticket part.

It is likely that the optimizer will remove the memset() call which we
want here to leave no trace in the memory.