Use KERB_QUERY_TKT_CACHE_EX_RESPONSE for get_principal

There's no real need to get a fully-fledged TGT, which is not
possible when UAC is enabled.
Try to scan_ccache() after leash picks a cache

We need to call scan_ccache() in order to notice that there
are credentials and read their expire time.