Sorry, I've forgotten one important task: handling session key derivation. That's also on my plate. Let's see if I can get kadmin -n today and deal with that tomorrow. I will definitely get to the session key handling before merging to trunk. --Sam