Would sure be nice if it was possible to get a ticket via Kerberos/GSSAPI. Maybe could be done via SPNEGO?