Qfs kerberos lib: first reasonably complete but untested kerberos 5 service (server) side implementation / kerberos wrapper. The access from multiple concurrent threads to the KrbService class methods needs to be serialized (this is true in general with most kerberos libs implementations anyway). The shared key as well as reply is with KrbService::Reply() method once kerberos authentication handshake completes. The intention is to use the key as pre-shared secret to "bootstrap" TLS-PSK.