I recently checked in a change to try "rlogin -x" by default, with RLOGIN_FLAGS="" as an option to try unencrypted rlogin. It still only tries rlogin in one mode, and won't try slogin or telnet. Maybe that's good enough?