-krb5_fwd_tgt_creds() is still broken
-the 4 to 5 principal thing
-gss_acquire_cred still doesn't allow an alternate keytab
-and the db lib versus headers thing
/afs/andrew.cmu.edu/usr/shadow/ka2heim.txt