* pam_krb5afs.c: call krb5_userok() during authentication as well
    	(Douglas E. Engert).
    * pam_krb5afs.c: skip the krb5_kuserok() call in account management if we're
    	skipping user checks -- krb5_kuserok fails if getpwnam() fails.