The evolution of Windows authentication

While options have been added to properly disable NTLM in SMB, will there be an effort to add similar options for the RDP client? There is currently no good way to disable outbound NTLM in the RDP client specifically, and to make matters worse, things like server validation happen *after* the NTLM/Kerberos exchange in CredSSP right now. While RDP responder attacks are not as popular as with other protocols using Windows authentication, there is a lot of area for improvement for RDP client hardening. Again, I would be more than happy to point you to the places where this could be improved, most of which would need to be done in mstsc.