add options for kerberos authentication