Oh, and since the idea has come up before: we can't move 
xdr_nullstring() into libkdb5 and use it from libkadm5, because 
libkadm5clnt does not link against libkdb5.