(that's doc/rst_source/krb_users/tkt_mgmt.rst) 87 The okay as **delegate** flag indicates that the server specified in 88 the ticket is suitable as a delegate as determined by the policy of 89 that realm. A server that is acting as a delegate has been granted a 90 proxy or a forwarded TGT. This flag is a new addition to the Kerberos 91 V5 protocol and is not yet implemented on MIT servers. It would seem that the markup should be around the "okay as delegate" flag, not the "delegate" flag, which klist.1 claims will be displayed as 'O' in the 'klist -f' output. -Ben