Additional intermediate credentials are created when creating the GSSCredential - these should be made available from the GSSCredentialFactory if required so they can be used elsewhere.

i.e. Parsing SPNEGO messages to make credential delegation possible.