Because gss_init_sec_context() is passed a claimant credential object (delegate_cred), it uses the ccache associated with that credential object, not the default ccache as set by gss_krb5_ccache_name().