OpenSSH: add Kerberos support