[OpenAFS] Password transition to krb5 - your methods?

[Jeff Blaine]

I realize there's not a conversion process to get AFS krb4
principal passwords into krb5-land.

What approaches have you all taken in order to make the
kaserver -> krb5 KDC transition as painless as possible
to users?

Thanks for any insight/tips.