krb5_verify_authdata_kdc_issued
code = krb5_verify_authdata_kdc_issued(kcontext,
assert(krb5_verify_authdata_kdc_issued(context, &key, kdci[0], NULL, &container_out) == 0);