destroy kerberos cache before firefox in freeipa password change
    
    In F25+, Firefox seems to do kerberos auth automatically, so if
    we go to the FreeIPA admin URL while kerberos-authed as test4,
    we are logged in right away as test4 - neat! But not what we
    wanted. So let's kdestroy.