isc_result_t
get_krb5_tgt(isc_mem_t *mctx, const char *principal, const char *keyfile);