Move ipalib.install.kinit to ipalib

- kinit helpers are now in `ipalib.kinit`.
- helpers can now use default ccache locations like many other similar
  helpers
- helpers return the result from `run` for debugging
- constants are now in `krb_utils`
- helpers pass `KRB5*` and `GSS*` env vars along, so `KRB5_TRACE` works
- document how to kinit for `ipalib.api`

Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

ipatests/util.py

@@ -38,17 +38,12 @@ import six
 
 import ipalib
 from ipalib import api
+from ipalib.kinit import kinit_keytab, kinit_password
 from ipalib.plugable import Plugin
 from ipalib.request import context
 from ipapython.dn import DN
 from ipapython.ipautil import run
 
-try:
-    # not available with client-only wheel packages
-    from ipalib.install.kinit import kinit_keytab, kinit_password
-except ImportError:
-    kinit_keytab = kinit_password = None
-
 try:
     # not available with client-only wheel packages
     from ipaplatform.paths import paths