I guess this is more of a kerberos problem than an SASL one, which
brings me to my question.

I've seen "Unknown code krb5" with a couple of other numbers. 156 seems
to be "cannot contact KDC", 195 seems to happen when the token isn't
there. I've also seen 32, but I'm not sure what that one is. Is there a
place to lookup these error codes?