[krbdev.mit.edu #1610] krb5_fwd_tgt_creds uses application supplied ktypes list

[Sam Hartman via RT]

This means that if you have an AES session key ticket and are trying
to delegate using GSSAPI, the delegation will fail because no valid
TGT will be found in your cache.