krb5_kt_dup
code = krb5_kt_dup(context, req_keytab, &kt);
code = krb5_kt_dup(context, client_keytab, &cred->client_keytab);