I'd say it's fairly important that gss_acquire_creds_with_password not change the default credential that will be used by the default ccache. If you're storing in a DIR cache it's probably OK to store in that cache. however I've certainly been telling application authors (and have done so myself) it's reasonable to assuming that gss_acquire_creds_with_password will not affect the external environment such as the default credential. --Sam