Proposal to export gssapi context

[Kevin Coffman]

> >>>>> "Ken" == Ken Raeburn <raeburn at MIT.EDU> writes:
> 
>     Ken> 2) I assume it applies whether the credentials in question are used as
>     Ken>    initiator or acceptor, and thus could make init_sec_context or
>     Ken>    accept_sec_context fail?
> 
> IT's really only needed on the initiator side.  We could allow it to
> be used on the acceptor side but this would be additional complexity.

It might be convenient (for us) to use on the accept side to limit
to what the kernel supports -- despite what the keytab supports.
But this isn't strictly necessary.