get_su_principal
rv = get_su_principal(context, user, ruser, &su_principal_name, &su_principal);
static long get_su_principal(krb5_context, const char *, const char *,