krb5_db_create_policy
if ((ret = krb5_db_create_policy(kcontext, &rec))) {
krb5_db_create_policy( krb5_context kcontext,
if ((ret = krb5_db_create_policy(handle->context, &pent)))