We have a feature in review for 1.13 to add [MS-KKDCP] support. Right
now this feature is implemented by adding OpenSSL's libssl and libcrypto
as dependencies of libkrb5, if we find libssl at configure time. In the
future we might add NSS support as a build-time option, but probably not
We could change this to indirect through an internal pluggable interface
for TLS. The internal TLS plugin module would only be loaded if HTTP
proxy support is used.