<krb5/widen.h> was broken. unsigned short quantities promote to int's when argument passing, not to unsigned int's.