[krbdev.mit.edu #8152] gss_acquire_cred_with_password() ignores expired creds

[Sam Hartman via RT]

I'd say it's fairly important that gss_acquire_creds_with_password not
change the default credential that will be used by the default ccache.
If you're storing in a DIR cache it's probably OK to   store in that
cache.
however  I've certainly been telling application authors (and have done
so myself) it's reasonable to assuming that
gss_acquire_creds_with_password will not affect the external environment
such as the default credential.

--Sam