krb5: Replace type-specific ccache/principal check
    
    Instead of having duplicate functions that are type custom use a signle common
    function that also performs access to the cache as the user owner, implicitly
    validating correctness of ownership.
    
    Resolves:
    https://fedorahosted.org/sssd/ticket/2061