qa: refactor utils.kerberos_helper

utils.kerberos_helper is ugly, maybe we should move it to something like cri_models.kerberos and refactor it a little bit.