automount purgatory

I've read the helpful article on automounting...Perhaps I'm being a bit naive, but I would have thought that Kerberos, automount and afp would be a bit more straight forward and cooperative by 10.4.5...I'm trying to force people to get a kerberos ticket before they can automount a server volume. As I understand it the porblem is that on startup and login, the user does not yet have a ticket. The mounts are established in an unauthorized state, so that even when one subsequently obtains a ticket, the automounter doesn't unmount them and remount them in a seamless fashion. I can certainly force the issue by killing the automount daemon and restarting it by hand on the client, but one seems to need to acquire an afpserver ticket. That is only issued by directly signing into the server, which really obviates the whole point of automount anyway. Is there a way out of this conundrum? Or am I stuck with abandoning Kerberos all toghther?