Create mechanism objects in the mechanisms container as needed for mechanism restrictions.
The SPNEGO mechanism does not appear in the example directory entries that follow because it is not required. SPNEGO is a negotiated mechanism that can only negotiate KRB5 (Kerberos authentication), which does appear in the examples. SPNEGO policy is completely defined by KRB5 policy.