Split krb5 out into separate module