Well, the PAC buffer type constants seem like they are an MS technical specification issue rather than an MIT Kerberos API issue. I don't object to MIT exposing constants for this in krb5.h, although I'd recommend a prefix including both KRB5 and MS. Something like KRB5_MS_PAC. Actually I can see an argument that MS should not be included.