pub const KRB5_TC_MATCH_FLAGS: krb5_flags = 0x00000004;
All the flags set in the match credentials must be set