Token contents/encoding under kerberos

[jeffsaremi]

There seem to be a way to create an initial token needed for LDAP authentication under kerberos.
If we are NOT to call guard get token -o ldap, could we still generate this token using standard kerberos calls? Or is the token format in this case is proprietary to guard.