KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS
retval = krb5_c_decrypt(context, &key, KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS,
KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS,