Nathaniel McCallum and I have been working on a project to augment the prompter callback to allow for richer initial credential UIs. The writeup is at: http://k5wiki.kerberos.org/wiki/Projects/Response_set Input is appreciated.