 -		options->gss_deleg_creds = 0;
 +		options->gss_deleg_creds = 1;
 +	if (options->gss_trust_dns == -1)
-+		options->gss_trust_dns = 1;
++		options->gss_trust_dns = 0;
 +	if (options->gss_renewal_rekey == -1)
 +		options->gss_renewal_rekey = 0;
  	if (options->password_authentication == -1)

+.Cm no, the hostname entered on the
+command line will be passed untouched to the GSSAPI library.
+The default is
+.Cm yes .
+This option only applies to protocol version 2 connections using GSSAPI.
 .It Cm HashKnownHosts
 Indicates that

+#   GSSAPIAuthentication yes
+#   GSSAPIDelegateCredentials yes
+#   GSSAPIKeyExchange yes
+#   GSSAPITrustDNS no
+#   GSSAPIRenewalForcesRekey no
 #   BatchMode no
 #   CheckHostIP yes
