In krb5_get_cred_via_tkt, strip the ok-as-delegate flag from
credentials obtained using a foreign TGT, unless the TGT also has
ok-as-delegate set.


https://github.com/krb5/krb5/commit/12f5bc018cfbe01a7f4f761f5260287d5b3f5e8c
Commit By: ghudson
Revision: 22272
Changed Files:
U   trunk/src/lib/krb5/krb/gc_via_tkt.c