I think Will's right about this KDC memory leak in TCP configurations.
Probably kill_tcp_connection should free the storage when a TCP
connection goes away.  Need to look closer.