(I thought we had a ticket on this, can't find one though.)

We need to implement the generic crypto support for GSSAPI.  The current
spec is draft-ietf-krb-wg-gssapi-cfx-04.txt in the internet-drafts area.