It's been present in MIT since krb5-1.8, and was added to heimdal at about the same time [the commit message](https://github.com/krb5/krb5/commit/45875a4d7bbd6bb8a943572d84fef5ca2bb18291). I can't find a standard for it, but the Heimdal wrote up [a piece on its use](http://blog.h5l.org/2008/10/ok-as-delegate-and-gss-api.html).