qualify default kerberos user