KRB5_INIT_CREDS_NO_C_NO_EKU_CHECK
opt->opt_private->flags |= KRB5_INIT_CREDS_NO_C_NO_EKU_CHECK;
opt->opt_private->flags &= ~KRB5_INIT_CREDS_NO_C_NO_EKU_CHECK;
if (ic_flags & KRB5_INIT_CREDS_NO_C_NO_EKU_CHECK)