KRB5_KDC_MKEY_2
retval = krb5_read_password(util_context, KRB5_KDC_MKEY_1, KRB5_KDC_MKEY_2,
char *krb5_mkey_pwd_prompt2 = KRB5_KDC_MKEY_2;