to_string ?context ~info code looks up the description of code in the kerberos error tables and appends that to info, which should likely be the name of the c function that returned code.