When I did it for SunSSH I was kinda new at standardization and in a hurry, so I did add a gss userok function to the mechglue, but as a private function (__gss_userok()). I was amused just now when i noticed that some open source projects outside Solaris (e.g., dovecot) use it -- proof that it is useful in the mechglue, I suppose! :)
If you add it to MIT I'll likely add it to Heimdal.
Nico
--