We currently use an auth process exported from the kerberos module, which makes it difficult to change without rereleasing that module. We should move this code into the driver since the auth process isn't really relevant to generic kerberos support.