Avoid creating empty target ccaches in ksu

When we attempt to reuse a subsidiary in a configured target ccache
collection, take care that, if we don't actually have creds for the
target principal to store, we don't reinitialize a cache, which would
destroy any credentials which were already present.