On Linux you can still execute 'kinit' to power up and get a ticket. (Via password).

I'm sure there will be something similar. Unless authentication in the first place cannot be decoupled from ssh login, then your key would have to be able to grant you a Kerberos ticket.