KRB5_KDB_NO_MATCHING_KEY
if (retval == KRB5_KDB_NO_MATCHING_KEY && decrypt_err != 0)
if (retval == KRB5_KDB_NO_MATCHING_KEY)
return ret ? ret : KRB5_KDB_NO_MATCHING_KEY;