We should have routines to compare principals. They would be simple enough to write... I suppose this goes in libkrb....