How far along would a patch that simply made krb5_rd_req not care about the second component (hostname) of a principal go to address your needs? Do you need cases where the realm mismatches or where the application asked for nfs and you really want imap?