We had an idea here for doing afs over the same gss-rpc that nfs v4 uses. In addition to being able to run over udp or tcp, you would also get 21st century crypto with your choice of K5 or SPKM to replace K4 and fcrypt.