In krb5_mcc_resolve, if k5_mutex_lock() fails, lid is leaked. Admittedly an unlikely case, but 
should be fixed.