krb5_decode_krbsecretkey
ret = krb5_decode_krbsecretkey(context, entry, ber_key_data, &mkvno);
krb5_decode_krbsecretkey(krb5_context, krb5_db_entry *, struct berval **,