initial working prototype of kerberos authentication. requires manually running kinit.