[krbdev.mit.edu #1175] TCP support needed in the KDC

[Ken Raeburn via RT]

Docs have been updated.  Default is KDC TCP service off, because of lack
of DoS protection, but we had decided that that was good enough for 1.3;
sites that really need the support can enable it easily enough and deal
with the DoS risks, for now.