WS-Security and GSS-API: How do I get the session key?

[Speedo]

Hi All

I guess this issue had been discussed before: WS-Security negotiates
with Kerberos 5 but uses the session key in a different way from GSS
tokens. Since GSS-API is the public API to access Kerberos 5, is there
any recent progress in enhancing the GSS-API to provide a function
like gss_get_session_key()?

How do you guys program WS-Security nowadays?

Thanks
Speedo