k5_buf_add_uint64_le
k5_buf_add_uint64_le(&ctx->negoex_transcript, MESSAGE_SIGNATURE);
k5_buf_add_uint64_le(&ctx->negoex_transcript, 0);