If I understand correctly, this won't prevent us from somewhere down the line removing the private symbols that applications aren't supposed to be using, but we export for the moment for the current GSSAPI or Kerberos v4 implementations, right? Ken