zero_signature
ret = zero_signature(context, pac, KRB5_PAC_SERVER_CHECKSUM, ©);
ret = zero_signature(context, pac, KRB5_PAC_PRIVSVR_CHECKSUM, ©);
ret = zero_signature(context, pac, KRB5_PAC_FULL_CHECKSUM, ©);