LDAP: Move sss_krb5_verify_keytab_ex to ldap_child
    
    The function was called from one place only, so it makes no sense to
    keep it in a shared module. Moreover, the function should only be
    called from code that runs as root.
    
    Reviewed-by: Michal Židek <mzidek@redhat.com>