>>>>> "Simo" == Simo Sorce <ssorce at redhat.com> writes: Simo> Also being able to enforce respect of such flag in the Simo> kerberos/gssapi libraries would be a big advantage, but I am Simo> not sure that is always possible/wanted. It is not always wanted; see the previous discussion.