krb5 should use the kqueue API (kernel event notification mechanism) to detect when 
edu.mit.Kerberos changes rather than calling stat() all the time.

"man kqueue" on an OS X box for more information.