Summary of the new feature / enhancement
As a Windows desktop user, my Kerberos credentials are refreshed on login or screen unlock. If we're able to use the GSSAPIRenewalForcesRekey option in the openssh client, this should allow downstream clients to rekey seamlessly and store the updated Kerberos tgt.
At the moment I see:
Bad configuration option: gssapirenewalforcesrekey
Proposed technical implementation details (optional)
No response