Don't leak those creds
Check for KRB5_KDB_NOENTRY properly