the other possibility is to build a version of ktc linked against something that uses a ticket file to get authentication data. if we already had a kerberos dependancy it could probably be done with a wrapper routine and a switch in every one of the helper binaries.