kadmind leaks extended error strings on some not-uncommon error conditions. Patch from Apple attached.