This is part of the program to move REST services like bx509d out of kdc/.
Part of refactoring to split out bx509/bnegotiate, add a kadmin REST service, and move all of that out of kdc/.