I don't support making changes here either to do what Windows does or to do what Heimdal does. If there are interop problems--for example if Windows doesn't support rc4-hmad-md5 checksums in the authenticator, then we should consider changes.