pkinit_init_identity_crypto
retval = pkinit_init_identity_crypto(&reqctx->idctx);
krb5_error_code pkinit_init_identity_crypto(pkinit_identity_crypto_context *);
retval = pkinit_init_identity_crypto(&plgctx->idctx);