This has already been discussed on the kitten list. Here's a project writeup for the GSS credential store extensions we plan to add soon: http://k5wiki.kerberos.org/wiki/Projects/Credential_Store_extensions