Use stricter requirement for krb5-server
    
    Our code strictly depends on 1.10 as the KDC DAL plugin interface is not
    guaranteed stable and indeed is different in 1.9 and will be different
    in 1.11
    So we cannot allow upgrades to 1.11 until we can provide a plugin that matches
    1.11's interface.