Sam, r23325 leaks fast_armored_req if it rejects based on the presence of tgs_subkey, because it returns immediately instead of setting retval and relying on the if ladder.