KRB5KRB_AP_ERR_BADKEYVER
code == KRB5KRB_AP_ERR_NOKEY || code == KRB5KRB_AP_ERR_BADKEYVER)
krb5_set_error_message(context, KRB5KRB_AP_ERR_BADKEYVER,
code = KRB5KRB_AP_ERR_BADKEYVER;