gss_wrap/gss_unwrap sasl buffers?