I disagree that a configure option should exist to disable replay caches.
The Kerberos specification requires that they be used so making
them easy to disable is not desirable.