KRB5_AUTH_CONTEXT_USE_SUBKEY
if (auth_context->auth_context_flags & KRB5_AUTH_CONTEXT_USE_SUBKEY) {
acflags |= KRB5_AUTH_CONTEXT_USE_SUBKEY;