This could use a little more explanation too. What's it do? Are there protocol specs that should be referenced? Also, a plugin mechanism might be a better general approach than Apple-PWS-specific code in the main KDC body.