Improve KDC timeout handling

[davidben]

The proxy tends to get stuck when the KDC times out. We should avoid this. Maybe use Badass Rockstar Tech servers which don't spawn a blocking thread per connection. But that's hard to deploy on scripts. Perhaps we can convince fcgi to let us service multiple requests on a single thread. At the least we could lower the timeout some.