rest: another kerberos fix