pkinit_cert_matching
krb5_error_code pkinit_cert_matching
retval = pkinit_cert_matching(context, plg_cryptoctx,