A kerberized reader writer pair wraps up an underlying reader writer pair with additional logic according to the Conn_type.t with which it is created:

• Priv: encrypt writes and decrypt reads. This provides confidentiality and integrity.
• Safe: add keyed cryptographic checksums to writes and validate them on reads. This provides integrity.
• Auth: no additional logic.

These transformations are done to chunks of bytes at some reasonable granularity.

All exceptions will be sent to the underlying writer's monitor.

In the Auth case, the underlying reader and writer are the same as the kerberized ones.