Format of krb5 privacy token:
	1. variable:	ASN-encoding with mech OID, token length
	2. 24 bytes:	krb5 header
	3. 8 bytes:	"confounder"
	4. variable:	data
	5. 1-8 bytes:	padding

Encryption and signing are both over 3, 4, and 5.