Would it be a good idea to wrap all this logic into gss_acquire_credential so that if you have a keytab you can just use it as an initiator? I.E. would that be a good improvement for the future? --Sam