David Howells got some patches accepted to the mainstream kernel that add key/keyring support. Does OpenAFS make use of this?