map_invalid
return map_invalid(ret);
return (ret == KRB5_CC_END) ? KRB5_CC_NOTFOUND : map_invalid(ret);