Please see ticket 3039 which I have generated as a parent to this and all of the other 2x tickets Hank posted today. At the current time it is not feasible for the MIT Kerberos team to be considering the construction of new ccache implementations beyond the CCAPI implementation. ccache implementations really need to be managed by the OS vendor and the MIT Kerberos team should be working with vendors in order to integrate well with their implementations. On the other hand, some sites do have the desire to add new ccache functionality which is not supported by the Kerberos libraries. By adding a plug-in for ccaches. Those sites can add the functionality they need. The actual implementation of the plug-in could rely on custom kernel modules or anything else the site desires.