tsig credentials would wrongly default if kerberos info was given