sshd and some other SSH applications allow the use of GSSAPI/SSPI, without prompting for user credentials. It would be cool if sshwifty could get GSSAPI/SSPI credentials from the user's browser via SPNEGO HTTP authentication which would then be passed on as the user connects to ssh or other kerberized services.