Currently, we release the GIL around some of the GSSAPI methods. Which methods we release the GIL around is largely based on conjecture as to which methods might be computationally intensive. It would be better to grab the MIT Kerberos source and check to see which methods actually perform computation, and which simply do things like returning struct members, since releasing the GIL around these methods might actually cause a performance hit.