Some classes in the internal krb5 packages contain debug variables that can only be turned on via reflection or via recompilation of src code.

We should consider allowing such debug variables to be exposed via some config/property setting. See sun.security.krb5.internal.crypto.dk.AesDkCrypto for an example.