anchor.diff:     (cerberus::encode-sequence-of stream 'cerberus::encryption-key list)))
   
   (cerberus::defsequence db-entry ()
  -  (name cerberus::asn1-string)
  +  (name cerberus::asn1-generalized-string)
     (keys db-key-list))
   
   (defvar *db* nil)
  
positive.code: (defconstant +default-count+ 64)
  (defconstant +default-block-size+ 512)
  
  (defun open-kdc-db (&key count)
    (unless *db*
      (setf *db*
  	  (pounds.db:open-db *db-path* #'decode-db-entry #'encode-db-entry
  			     :count (or count +default-count+)
  			     :block-size +default-block-size+))))
  
  (defun close-kdb-db ()
    (when *db*
      (pounds.db:close-db *db*)
      (setf *db* nil)))
  
negative.code:   (let ((entry (pounds.db:find-entry name *db*
  				     :test #'string-equal
  				     :key #'db-entry-name)))
      (when entry 
        (list :name (db-entry-name entry)
  	    :keys (db-entry-keys entry)))))
    
  (defun remove-spn (name)
    (declare (type string name))
    (open-kdc-db)
  