KRB5_INIT_CREDS_CANONICALIZE
opt->opt_private->flags |= KRB5_INIT_CREDS_CANONICALIZE;
opt->opt_private->flags &= ~KRB5_INIT_CREDS_CANONICALIZE;
if ((ctx->ic_flags & KRB5_INIT_CREDS_CANONICALIZE) ||