krb5enc_dispatch_decrypt_hash
err = krb5enc_dispatch_decrypt_hash(req, 0);
return krb5enc_dispatch_decrypt_hash(req, aead_request_flags(req));