* pam_krb5afs.c: after checking for a previously-stored return code, return
    	PAM_USER_UNKNOWN if none was stored.  Make xstrnlen() take an unsigned
    	char string to reduce compile warnings.