wip: start to fold kerberos support into gsd