draft-ietf-secsh-gsskeyex-06 allows for hosts to give clients their host keys in a secure manner, which makes it possible for subsequent re-keys to work even when the client's GSS-API credentials are expired. Nico --