We need to: 1. Fix the flag and mask values in k5-int.h. 2. Implement the hide-client-names option bit in the KDC, so we don't break interoperability with Heimdal clients. 3. Inform the kitten working group that krb5 1.7-1.11 will erroneously consider flag bits 25-32 to be critical.