anonymous realm and host realm referrals

[Greg Hudson]

On Thu, 2009-12-17 at 12:36 -0500, Sam Hartman wrote:
> 3) Introduce functionality to find the first TGT in the ccache when
> trying to contact the client's KDC and using the anonymous realm.

This makes me a little nervous because I think it may be the first time
we're considering ccaches as ordered sequences rather than sets, but it
should work in practice.