[krbdev.mit.edu #8625] Caching Forwarded TGTs

[Greg Hudson via RT]

I don't know if there was originally a reason not to cache forwarded 
TGTs.  One possible reason is that if you forward the same TGT to 
multiple parties, they will be able to decrypt each others' TGS replies 
and any AP sessions created using the resulting tickets.  If you 
forward a different TGT to each party, they cannot read each others' 
sessions.