By my reading of the code, that variable doesn't do what Sam thinks it does. It affects the sort order of the preauth list (and the default value is what causes PKINIT to be used in preference to mechanisms which would prompt for the password, like encrypted timestamp), but it doesn't cause optimistic preauth.