I was aware of the requirement for a krb5 context. However I was assuming Luke could do something similar to what the krb5 mechanism does today.