Add support for rxkad-k5-kdf
    
    - learn to set AFS tokens by deriving DES keys from session keys that
      aren't single-key DES keys, for better compatibility with OpenAFS
      1.4.15/1.6.5 and later (ticket #2, #1076197)