add note on Kerberos