it should be conceptually fairly easy to add krb5 (hopefully gssapi,
actually) code to parallel the krb4 support.  the hard part is that
there can be more than one enctype, but we could force 3des.  gsswrap
will be unusable due to the err interesting scheme the krb4 stuff
uses.

-- 
        Greg Troxel <gdt AT ir.bbn DOT com>