How to read secret key for a service?

I'd like my GSS-API server program running as a service on Windows. Is
the a Win32 API to read the secret key for the running account? I
mean, just like an in-memory keytab?

I know there's the ktpass command, but I don't like to store the
keytab file, and I want to use an existing service principal name.