Add some KDC entries to the registry

Though our library happily uses DNS, I can't get Windows to
successfully contact KDCs found through the SRV records.
So, we do need to stay in the business of shipping around
KDC entries, after all.
Relax constraint on having non-expired creds

When scanning a ccache to determine parameters for use by the
GSS-API, if we cannot determine an expiration time for the credentials
by looking at the contents of the ccache, just use GSS_C_INDEFINITE
as the value instead of leaving it zero and forcing acquisition of
initial tickets when delayed resolution is finally forced.

This works around an issue with the MSLSA cache type, when the
user is a local administrator, UAC is enabled, and the only
ticket in the cache is a TGT.  The cache will operate normally,
but the TGT session key cannot be retrieved, so the ccache implementation
will never return the TGT during iteration, making it unavailable
for use by the GSS-API layer to inspect the credentials.

This does leave the bug wherein have_tgt is not set, but this is only
used by IAKERB, which is not expected to be functional with the
MSLSA cache under these circumstances anyway.