code: private static byte[] produceRenewToken(ExtendedGSSContext c,
                                              byte[] token)
          throws GSSException {
          if (!GSIConstants.MODE_SSL.equals(c.getOption(GSSConstants.GSS_MODE))) {
              throw new GSSException(GSSException.NO_CONTEXT);
          }
          byte[] framedToken = new byte[token.length + 4];
          SSLUtil.writeInt(token.length, framedToken, 0);
          System.arraycopy(token, 0, framedToken, 4, token.length);
          return c.wrap(framedToken, 0, framedToken.length, null);
      }
docs: Frames and wraps a token according to the GRAM "renew" protocol
  for use in a GSI delegation handshake.  The input token is framed with
  a 4 byte big-endian token length header, and the resulting framed token
  wrapped in SSL mode (GSSContext's GSS_MODE option set to MODE_SSL)
  
  @param c The context used to wrap the token
  @param token The unaltered output of the context's initDelegation
  @throws GSSException if an error occurs during token wrapping or if
  context is insufficient
  @return a wrapped, framed token to send to globus job manager