fix pam_krb5 to support heimdal