gss_krb5: add support for new token formats in rfc4121