r25037 should be pulled up to 1.9.  It fixes krb5_gss_import_cred with no 
specified keytab principal.