>>>>> "Sam" == Sam Hartman via RT <rt-comment@krbdev.mit.edu> writes:

Sam> I thought you convinced Ken and I that you only needed two
Sam> subkeys and that all four functions would set both subkeys.

Hm.  Yeah, I could be misremembering.  Having all four functions set
both subkeys would work.  The getlocalsubkey and getremotesubkey
functions won't need changing in that case, though the
{mk,rd}_{priv,safe} functions still probably want to have their key
preferences changed somewhat.