derive_cookie_key
ret = derive_cookie_key(context, key, client_princ, key_out);
ret = derive_cookie_key(context, local_tgt_key, client_princ, &key);