Will the Real get-a-tgt-with-a-password Function Please Stand Up?

[Sam Hartman]

I believe both MIT and Heimdal support krb5_get_init_creds and
krb5_verify_init_creds.  Heimdal has an additional convenience
function.

Note that calling verify_init_creds is mandatory for secure operation
if you are checking for local access.