This was inspired by the issues idenified in #6543.

The idea is that we should encrypt the session cookie stored in the keyring with the ticket used to obtain it.
This way if the ccache is kdestroyed the cookie is rendered invalid as the owner of the cacche almost certainly intend.

Alternatively store the cookie in the ccache instead of a keyring so that it is destroyed by kdestroy -A