actual initial armor support
    
    - tweak fake v5_set_principal_realm()
    - make v5_select_keytab_service() take a principal name rather than creds
    - add v5_setup_armor_ccache_keytab(), v5_setup_armor_ccache_pkinit()
    - initial v5_setup_armor_ccache()