krb5_auth_con_free should support freeing a null auth_context without segfault