try_verify_pac
ret = try_verify_pac(context, enc_tkt, server, server_key, tgt_key,
ret = try_verify_pac(context, enc_tkt, server, server_key, &old_key,