We'd really prefer you just call into a krb5_32.dll. That will continue to work if the keytab format changes in the future. For example we're in the middle of coordinating on a change to how key versions are handled.