I would support reporting these errors via KRB5_TRACE. I would not support 1) changing context initialization to fail in cases where it currently does not 2) Reporting these erros to STDERR, system loging, event viewer or the like.