krb5_ldap_create_policy
if ((retval = krb5_ldap_create_policy(util_context, policyparams, mask)) != 0)
krb5_ldap_create_policy(krb5_context, krb5_ldap_policy_params *, int);