krb5: Use zap_free() after we encoded the ticket part.

It is likely that the optimizer will remove the memset() call which we
want here to leave no trace in the memory.

Signed-off-by: Andreas Schneider <asn@samba.org>