fixed in krb5-1.2.3