This probably won't matter, but may as well.

Extend delays, since authentication can take a while on a remote,
loaded network.  Use better strategies for waiting for activity
than simple numeric delays.  Fix the test count in k5start/daemon.

MIT Kerberos doesn't cope well with UID session keyrings.  It can
get tickets, but then the tickets disappear.  Check for that and
skip the keyring tests if we're running into that problem.

-H can now be used with -K in krenew as well.  Simplify the
implementation, hopefully improve the documentation, and add a
NEWS entry.

This allows users to override the default minimum remaining ticket
lifetime of two minutes after the next run when using -K.

When using -H without -K there should be no change in behaviour.

k5start, when run with the -K option to run as a daemon, no longer
exits if the initial authentication fails.  Instead, it reports the
error to standard error and then continues to run, attempting
authentication every minute as if authentication had failed after it
had started.  Patch from Rasmus Borup Hansen.

Clean up the temporary ticket cache on k5start failure if -o, -g, or
-m were given.  Based on a patch by Rasmus Borup Hansen.

If -i is given to krenew and the initial ticket renewal failed, start
with the shorter wake-up interval of one minute just as if a
subsequent renewal failed.

The first argument is the principal, not a username.  Don't call it
a username and imply that k5start can switch users.

- The .spec file refers to version 3.16.
- SLED doesn't have krb5-libs; both SLED and RHEL seem fine with
  Requires: krb5'.
- The %defattr lines cause some directory permissions problems.

This was breaking formatting for the web pages.

If there is no keytab configuration, we were generating a krb5.conf
file and not deleting it.

When k5start or krenew are running as a daemon and obtaining new
tickets fails, both now shorten the wakeup interval to one minute and
keep trying at that interval until the error resolves itself, and then
go back to the normal wakeup interval.

After a SIGHUP or SIGTERM when not running a command, k5start and
krenew now clean up their PID files, if any, before exiting.

Add a new -s option to krenew that, if given, tells krenew to send
SIGHUP to the command it's running when it exits because it can't
renew the ticket.  This is useful when continuing to run the command
without a valid ticket would be pointless.

Fix a regression introduced in kstart 4.0 where k5start -H would be
happy with an unexpired ticket for a different principal than the
desired client principal.

Fix a regression introduced in kstart 4.0 that caused k5start -H and
krenew -H to fail and attempt reauthentication with non-renewable
tickets even if the lifetime was long enough.  Thanks to pod for the
report.

Remove the MIT copyright and license; there are no appreciable bits
of MIT kinit left in this code.  Everything has been rewritten.

Update lots of LICENSE information from the import of new code from
rra-c-util and various licensing changes there.