I see that OpenSSH 3.8 was released today, with "New KerberosGetAFSToken option for sshd(8)." This sounds like good news.