Fix TGS client to request renewable/forwardable/proxiable if possible

This is necessary because some applications actually need or run
    better with renewable service tickets.  kca is an example
    application; AFS tokens are also another example.

lib/krb5/get_cred.c

@@ -1076,6 +1076,13 @@ _krb5_get_cred_kdc_any(krb5_context context,
 	context->kdc_usec_offset = 0;
     }
 
+    if (in_creds->flags.b.renewable)
+	flags.b.renewable = 1;
+    if (in_creds->flags.b.forwardable)
+	flags.b.forwardable = 1;
+    if (in_creds->flags.b.proxiable)
+	flags.b.proxiable = 1;
+
     ret = get_cred_kdc_referral(context,
 				flags,
 				ccache,