I'd love that gss functino, a krb5-context flag and a krb5.conf flag. Long term I'd like to implement Love's strategy for discovering this automagically from a realm. I think that would be a great 1.10 project, but moving towards better lack of DNS dependence would be great in whatever form it takes.