verify_keyusage
krb5_keyusage usage = verify_keyusage(ctx, FALSE);
krb5_keyusage usage = verify_keyusage(ctx, TRUE);