Provide an explicit list of options not to be allowed in AS requests rather than disallowing all unknown options. To generate a diff of this commit: cvs diff -r5.259 -r5.260 krb5/src/kdc/ChangeLog cvs diff -r5.108 -r5.109 krb5/src/kdc/kdc_util.c