Note: I asked Will why make these interfaces Volatile, and it seems that for now the Solaris Kerberos team wishes to go with Volatile for new interfaces from any latest MIT krb5 release (that was done in the PKINIT case, for example). MIT does not commit to interface stability, only to ABI stability (the MIT krb5 ABI is effectively Committed). CLIs are part of the Solaris ABI, but it's not clear that MIT considers CLIs part of their ABI. I think Volatile is reasonable for now, but I'd like to see all these interfaces' stability upgraded later on.
Nico --