num_retain
(state->retain = calloc(num_retain(state), 1)) == NULL ||
(r = sshbuf_put_string(b, state->retain, num_retain(state))) != 0 ||
lr != num_retain(state) ||
