kerberos draft amended