diff --git a/kuser/kinit.c b/kuser/kinit.c
index cf44f51b8..b168b032e 100644
--- a/kuser/kinit.c
+++ b/kuser/kinit.c
@@ -71,9 +71,6 @@ int fcache_version;
 char *password_file	= NULL;
 char *pk_user_id	= NULL;
 char *pk_x509_anchors	= NULL;
-char **pk_x509_pool	= NULL;
-char **pk_x509_revoke	= NULL;
-
 
 static char *krb4_cc_name;
 
@@ -484,8 +481,8 @@ get_new_tickets(krb5_context context,
 						 principal,
 						 pk_user_id,
 						 pk_x509_anchors,
-						 pk_x509_pool,
-						 pk_x509_revoke,
+						 NULL,
+						 NULL,
 						 0,
 						 NULL,
 						 NULL,
@@ -825,23 +822,6 @@ main (int argc, char **argv)
 				krb5_principal_get_realm(context, principal), 
 				"afslog", TRUE, &do_afslog);
 
-    /* XXX implement krb5_appdefault_strings  */
-    pk_x509_pool = krb5_config_get_strings(context, NULL,
-					   "appdefaults", 
-					   "pkinit-pool", 
-					   NULL);
-
-    pk_x509_revoke = krb5_config_get_strings(context, NULL,
-					     "appdefaults", 
-					     "pkinit-revoke", 
-					     NULL);
-
-
-    if (pk_x509_anchors == NULL)
-	krb5_appdefault_string(context, "kinit",
-			       krb5_principal_get_realm(context, principal), 
-			       "pkinit-anchors", NULL, &pk_x509_anchors);
-
     if(!addrs_flag && extra_addresses.num_strings > 0)
 	krb5_errx(context, 1, "specifying both extra addresses and "
 		  "no addresses makes no sense");