k5_identify_realm
k5_identify_realm(krb5_context context, krb5_principal client,
return k5_identify_realm(context, &client, NULL, canon_user);
return k5_identify_realm(context, &client, subject_cert, canon_user);