// Enable NTLM fallback by providing NTLM creds in constructor
        Kerb5Authenticator auth = new Kerb5Authenticator(new Subject(), "DOM", "user", "pass");
        auth.setForceFallback(true);

        // Token advertising Kerberos mech (so foundKerberos == true), but forceFallback should still route to NTLM
        byte[] init = spnegoInitWithMechs(Kerb5Context.SUPPORTED_MECHS);

        this.subject = subject;
    }

    /**
     * Testing only: force fallback to NTLM
     *
     * @param forceFallback
     *            the forceFallback to set
     */
    public void setForceFallback(boolean forceFallback) {
        this.forceFallback = forceFallback;
    }

    /**
     *
     * {@inheritDoc}
     *