Work required before we enable krb5 in default config

[Luke Howard]

>Yep, and this is what I'm looking to do.  Is there a standard option
>name for this already in use elsewhere?  Assuming I was to try and get
>this into upstream distributions, I assume I would want this on for AD
>realms (and eventually other KDCs if they start to support this), and
>off for current MIT/Heimdal etc realms.  It would be nice to be
>consistent if possible.
>
>Otherwise, I agree this should be pretty easy to hack off, I think I
>know the spot to modify. :-)

Great, I never bothered looking into fixing this...

-- Luke

--