FAST Negotiation API confirmation

[Sam Hartman]

>>>>> "Greg" == Greg Hudson <ghudson at MIT.EDU> writes:

    Greg> I think this is fine.  I was assuming that obtaining
    Greg> anonymous pkinit armor would be handled by kinit, but I
    Greg> guess there are other options.

What I'm doing will definitely support that.  I think you could
provide a significantly better user experience by doing so behind the
scenes and storing the armor ticket in a memory ccache.