ncctl controls the caller's kernel Kerberos credentials for any of the specified path's associated NFS mounts. There is currently no way to remember what the chosen identity is for a given mount after its been unmounted. nclist or ncctl get can be used to see what credentials are actually being used and ncdestroy or ncctl unset can be used to destroy that session's credential.