current string-to-key algorithm for DES in jgss/krb5 cannot pass the g-clef test in RFC 3961 A.2 (Page 38). the RFC needs UTF-8 encoding but our codes use system default encoding.

as a whole, we need to check all these password things of non-ASCII characters.