diff --git a/lib/krb5/get_cred.c b/lib/krb5/get_cred.c
index 8d1f42897..38c4ef748 100644
--- a/lib/krb5/get_cred.c
+++ b/lib/krb5/get_cred.c
@@ -834,10 +834,12 @@ krb5_get_credentials_with_flags(krb5_context context,
 	return ENOMEM;
     }
 
+    if (in_creds->session.keytype)
+	options |= KRB5_TC_MATCH_KEYTYPE;
+
     ret = krb5_cc_retrieve_cred(context,
 				ccache,
-				in_creds->session.keytype ?
-				KRB5_TC_MATCH_KEYTYPE : 0,
+				options,
 				in_creds, res_creds);
     if(ret == 0) {
 	*out_creds = res_creds;