ipa-kdb: add PAC_ATTRIBUTES_INFO PAC buffer support
    
    PAC_ATTRIBUTES_INFO PAC buffer allows both client and KDC to tell
    whether a PAC structure was requested by the client or it was provided
    by the KDC implicitly. Kerberos service then can continue processing or
    deny access in case client explicitly requested to operate without PAC.
    
    Fixes: https://pagure.io/freeipa/issue/9031
    
    Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
    Signed-off-by: Andrew Bartlett <abartlet@samba.org>
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>