fixes for MITKRB5-SA-2012-001 and .so symlinks
    
    - add upstream patch to fix freeing an uninitialized pointer and dereferencing
      another uninitialized pointer in the KDC (MITKRB5-SA-2012-001, CVE-2012-1014
      and CVE-2012-1015, #838012)
    - fix a thinko in whether or not we mess around with devel .so symlinks on
      systems without a separate /usr (sbose)