Only look for krb5.h if ssl.h was found.

Fixes bug reported in comment to #728322.