rest: fix kerberos