kstart: 4.1 - helper for kerberos authentication