match_client
krb5_boolean (*match_client)(krb5_context context,
match_client,
if (cb->match_client(context, rock, princs[i])) {
match = cb->match_client(context, rock, upn);