check_kdcpolicy_tgs
ret = check_kdcpolicy_tgs(context, t->req, t->server, t->header_tkt,
check_kdcpolicy_tgs(krb5_context context, const krb5_kdc_req *request,