In the case where no context-specific configuration changes are made, krb5_init_ctx is a fine way to get a new context. --Sam