KRB5_KDC_MKEY_1
retval = krb5_read_password(util_context, KRB5_KDC_MKEY_1, KRB5_KDC_MKEY_2,
char *krb5_mkey_pwd_prompt1 = KRB5_KDC_MKEY_1;