Luke, is there any reason that return_svr_referral_data needs to be so early? Can I move it to after the call to kdc_fast_handle_reply_key so I can include the fast negotiation stuff in the reply?