move Kerberos code into klogin.c; CFLUSH -> CDISCARD; errno.h declares