Mast does not really have any hand in the Kerberos module. It should not be confused with the GSSAPI module. *Points at Grubba*
Besides, it provides so puny Kerberos support I think it would be better to leave it undocumented, or else people looking for Kerberos glue would just be disappointed.