klog.krb5: cast get_cred_keylen to unsigned