How does this come up? Via forwarded TGTs with these weird kvnos in their enc-part's EncryptedData? Also, we're not changing the definition for kvno anywhere else, correct? Finally: do we have to make sure that kvnos for MIT principals never get larger than 2^31 - 1? Nico --