[krbdev.mit.edu #3223] gss_acquire_cred should search for the desired client principal if possible

[Alexandra Ellwood via RT]

Jeff, can you add the KfW specific portion of this patch and then mark it for pullup?  Thanks.