kdc: Return error code from _kdc_check_pac() with an armor ticket

This allows a TGT_REVOKED error to be returned to match Windows
behaviour.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>

kdc/fast.c

@@ -859,9 +859,6 @@ _kdc_fast_check_armor_pac(astgs_request_t r)
 
 	krb5_free_error_message(r->context, msg);
 
-	if (ad_kdc_issued == FALSE || mspac == NULL)
-	    ret = KRB5KDC_ERR_BADOPTION;
-
 	goto out;
     }