add kerberos when unrecognized mitid is scanned