First draft of a Kerberos section

As per my previous ML post, here is my first draft of a Kerberos section. Comments are very much appreciated, as is testing of the proposed settings.