 +#   GSSAPIAuthentication yes
 +#   GSSAPIDelegateCredentials yes
 +#   GSSAPIKeyExchange yes
-+#   GSSAPITrustDNS yes
++#   GSSAPITrustDNS no
 +#   GSSAPIRenewalForcesRekey no
  #   BatchMode no
  #   CheckHostIP yes

+.Cm no, the hostname entered on the
+command line will be passed untouched to the GSSAPI library.
+The default is
+.Cm yes .
+This option only applies to protocol version 2 connections using GSSAPI.
 .It Cm HashKnownHosts
 Indicates that

-		options->gss_deleg_creds = 0;
+		options->gss_deleg_creds = 1;
+	if (options->gss_trust_dns == -1)
+		options->gss_trust_dns = 0;
+	if (options->gss_renewal_rekey == -1)
+		options->gss_renewal_rekey = 0;
 	if (options->password_authentication == -1)
