ret_principal_ent
CHECK(ret_principal_ent(contextp->context, in, &ent));
return ret_principal_ent (sp, princ, ~0);
return ret_principal_ent (sp, princ, *mask);