sshkey_drop_cert
if ((r = sshkey_drop_cert(kcopy)) != 0) {
if ((r = sshkey_drop_cert(raw_key)) != 0)
sshkey_drop_cert(plain);
int sshkey_drop_cert(struct sshkey *);