Instead of flattening the iovecs passed into krb5_verify_checksum_iov, create a new internal verify_checksum_iov function which passes iovecs down onto the individual ->verify or ->checksum functions.