use long-term credentials mechanism and allow for a default realm