krb5_is_permitted_enctype
krb5_boolean krb5_is_permitted_enctype(krb5_context, krb5_enctype);
if (!krb5_is_permitted_enctype(context, ktype[i]))
if (enctype != -1 && !krb5_is_permitted_enctype(context, enctype))
if (!krb5_is_permitted_enctype(context, kd->key_data_type[0])) {
if (!krb5_is_permitted_enctype(context, ticket->enc_part.enctype))