kinit daemon with keytab, renewal, and AFS support