krb5_child: send PAC to PAC responder
    
    If the authenticated user comes from a different realm the service
    ticket which was returned during the validation of the TGT is used to
    extract the PAC which is send to the pac responder for evaluation.