4820fd1
- use krb5_set_trace_callback() if it's available - if we managed to get pwchange creds, don't bother trying a second time