krb5_decode_krbsecretkey
if ((st=krb5_decode_krbsecretkey(context, entry, bvalues)) != 0)
krb5_decode_krbsecretkey(krb5_context, krb5_db_entry *, struct berval **);