k5_pac_validate_client
ret = k5_pac_validate_client(context, pac, authtime, principal);
return k5_pac_validate_client(context, pac, authtime, principal);