Another option has presented itself recently, with the release of the Netscape Navigator source code: Kerberized HTTP.