rd_priv() needs to allow for multiple addresses in the messages it receives; see the newly coded krb5_mk_safe() for some code.