We drop an alias in the Utilities folder to Kerberos.app (found in /
System/Library/CoreServices) for the small number of users that
need to destroy their ticket and authenticate with a different
account.
Remember that you can have more than one set of tickets and just
switch between the active user.