fix segfault when there are no kerb credentials