Support for Microsoft Set Password protocol

[John Hascall]

> >   I'm with Love (I think it was he) here, this is not something
> >   I want in client config files.  Having it in the KDC config
> >   file would be fine with the method negotiated over the wire
> >   subject to any KDC config constraint(s).
> 
> I agree, this would be the ideal way.  I'm just not sure right now
> how you would negotiate it (is it possible?).

   I assume by trying it one way and getting back an
   error KADM5_I_REFUSE_YOUR_WEAK_ASS_WAY or some such...

John