disable kerberos hostdomain change check