Factor out the address checks in krb5_rd_safe and krb5_rd_priv into