fix incorrect strength bit values for certain Kerberos ciphersuites