Yes.  They really have no choice.

Sam Hartman wrote:
Do these applications actually need to be calling
krb5_cc_get_principal?