sshsig_match_principals
if ((r = sshsig_match_principals(allowed_keys, principal,
int sshsig_match_principals(const char *path,