pkinit_client_cert_match
krb5_error_code pkinit_client_cert_match
ret = pkinit_client_cert_match(context, req_opts->plgctx->cryptoctx,