Fixed in krb5 1.6 by ticket #4805, which uses krb5_cc_new_unique().