pam/sudo: don't use credential cache during sudo

When using sudo on jessie desktops, your active kerberos principal was
changed to your /root. This is annoying because it breaks RT (RT
actually gives a 500 internal server error), passwordless SSH, etc.

This fixes rt#3095.