KCF_PROV_VERIFICATION_FAILED
ASSERT(prov_desc->pd_state > KCF_PROV_VERIFICATION_FAILED);
if (pd->pd_state <= KCF_PROV_VERIFICATION_FAILED)