RFC 4178 contains two methods for use with SPENGO: - gss_set_neg_mechs - gss_get_neg_mechs (not implemented in MIT krb5) These are useful to constrain the mechanisms that SPENGO can use