krb5_encrypt_size
encrypt_size = krb5_encrypt_size(plain.length, key->keyblock.enctype);
while (sz > 0 && krb5_encrypt_size(sz, enctype) + 16 > req_output_size)