Try setting hdfs.proxyUser