+ /* this will return a size 1 less than the allocation size above; I
+ originally used sz so as to avoid type compatibility errors, as gnutls_datum
+ uses "unsigned int" for the size field, but this call takes separate data
+ and size fields, with the latter being a size_t*. For now, we live with
+ the error as being safer than throwing away type information. */