JGSS/Kerberos has a dependency on the JCE framework. Now that "4405171: Need to relocate jce and jsse jar files since they are loaded by bootstrap" is integrated, JGSS/Kerberos can also be moved out of <jre>/lib/ext and into rt.jar.