Fixed by ticket #4805, which uses krb5_cc_new_unique().