| -e | Displays  the encryption types of the session key and the ticket
              for each credential in the credential cache, or each key in  the
              keytab file. | 
| -c | List  tickets  held in a credentials cache.  This is the default
              if neither -c nor -k is specified. | 
| -l | If a cache collection is available, displays a table summarizing
              the caches present in the collection. | 
| -A     | If a cache collection is available, displays the contents of all
              of the caches in the collection. | 
| -f | Shows the flags present in the credentials, using the  following
              abbreviations: 
              | F | Forwardable |  | f | forwarded |  | P | Proxiable |  | p | proxy |  | D | postDateable |  | d | postdated |  | R | Renewable |  | I | Initial |  | i | invalid |  | H | Hardware authenticated |  | A | preAuthenticated |  | T | Transit policy checked |  | O | Okay as delegate |  | a | anonymous |  | 
| -s | Causes  klist  to run silently (produce no output), but to still
              set the exit status according to whether it  finds  the  credentials
              cache.   The  exit status is `0' if klist finds a credentials
              cache, and `1' if it does not or if the tickets are
               expired. | 
| -a | Display list of addresses in credentials. | 
| -n | Show numeric addresses instead of reverse-resolving addresses. | 
| -k | List keys held in a keytab file. |