> If this has been implemented in KfM, what mechanism was used? 

KLL will not automatically generate the dialog if the environment
variable KERBEROSLOGIN_NEVER_PROMPT is set, or if the caller calls the
private API

KLStatus  __KLSetAutomaticPrompting (KLBoolean inAllowAutomaticPrompting);

with inAllowAutomaticPrompting set to FALSE.