TKT_FLG_TRANSIT_POLICY_CHECKED
if (cred->ticket_flags & TKT_FLG_TRANSIT_POLICY_CHECKED)
setflag (enc_tkt_reply.flags, TKT_FLG_TRANSIT_POLICY_CHECKED);
&& !isflagset (enc_tkt_reply.flags, TKT_FLG_TRANSIT_POLICY_CHECKED)) {