tweaked initial state
added test for first principal
used setup() to avoid lots of duplicate initialization
kerberos work for broker and console
Broker key tests