* pam_krb5afs.c(get_config,pam_sm_authenticate): free the name of the
default realm after we finish with it.
* pam_krb5afs.c(pam_sm_chauthtok): don't bother constructing the name
of a password-changing service: it's redundant.
* pam_krb5afs.c(get_config): rework address list parsing.
* pam_krb5afs.c(pam_sm_chauthtok): free result and result code
strings, if we get some. Log the debug message before we free the
configuration.