krb5_c_derive_prfplus
ret = krb5_c_derive_prfplus(context, tgt_key, &d, ENCTYPE_NULL, key_out);
ret = krb5_c_derive_prfplus(context, tgt_key, &prf_input,