The RFCs aren't terribly clear about this, but after talking to Nico, we think the best solution is for gss_init/accept_sec_context to set actual_mech/mech_type to the correct mechanism for interpreting minor_code. I'm not sure how well that matches what the code does now.