pkinit_init_certs
retval = pkinit_init_certs(ctx);
static krb5_error_code pkinit_init_certs(pkinit_identity_crypto_context ctx);