pam-afs-session To-Do List

Portability:

 * Mac OS X Lion ships with Heimdal Kerberos with an MIT Kerberos
   compatibility shim on top of it, and the latter does not implement
   krb5_appdefault_*.  This means that pam-afs-session cannot get
   configuration from krb5.conf on Mac OS X Lion.  Find a way to link
   directly to the underlying Heimdal libraries so that the module can
   call the real krb5_appdefault_* functions.

Testing:

 * Add support for setting an environment variable to the fakepam testing
   library and use that to test behavior when KRB5CCNAME is only set in
   the PAM environment, not the general environment.

 * Add sufficient hook support to allow testing all of the output in the
   module/pag test while still checking the PAG status and changing
   internal state at each point.