add kerberos tickets