KRB5_KU_CANONICALIZED_NAMES
KRB5_KU_CANONICALIZED_NAMES, 0,
ret = krb5_verify_checksum(context, crypto, KRB5_KU_CANONICALIZED_NAMES,