Currently, krb5_send_tgs is exported at least on unix, but is defined in k5-int.h. I needed to change its interface in order to implement support for TGS authenticator subkeys (needed by FAST). Since it is a private interface, I rename it to krb5int_send_tgs and removed from the export list. --Sam