Enable weak enctypes for aklog if supported by Kerberos