2 -- in order of preference
4 - client: plugin support for fast plugins
5 note GSS-API can be used as PA plugin interface
7 - kdc: plugin support for fast plugins
8 partly done with "struct kdc_patypes"
10 - kcm: support FAST armor ticket
11 -- using PK-INIT anonymous