GSSAPI: use rk_UNCONST() on password and cert oid