[krbdev.mit.edu #7502] kldap plugin always writes to krbLastAdminUnlock

[Greg Hudson via RT]

Actually, I guess nulling out entry->tl_data could be a problem if the 
LDAP back end has encoded stuff like the DN in there.  So maybe that's not 
a good workaround either.