KRB5_MAX_FAIL_COUNT
if (client.fail_auth_count < KRB5_MAX_FAIL_COUNT) {
if (client.fail_auth_count == KRB5_MAX_FAIL_COUNT) {