More Kerberos/GSSAPI goodness