kerberos: don't free alarm in set_alarm, free in callers

It's a little unexpected that set_alarm "eats" the alarm passed in.
This commit makes it the caller's responsibility to free the alarm
to more closely match typical practice.

https://bugzilla.gnome.org/show_bug.cgi?id=726353