> In theory, yes. In practice, they're usually programming errors or
> crashes. (We could have a sysctl to turn off the behavior but I doubt
> many would use it.)

There were some patches to kerberos to put ticket keys into an
appropriately protected SysV shared memory segment rather than into
the credential cache file; the segment was only mapped when the keys
were needed.  GC'ing unmapped shared memory segments would break this
code were anyone to port it to netbsd..

					- Bill