krb5_ldap_modify_policy
if ((retval = krb5_ldap_modify_policy(util_context, policyparams, out_mask)))
krb5_ldap_modify_policy(krb5_context, krb5_ldap_policy_params *, int);