Refactor kube auth

Partially resolves #2302 
err is guaranteed to be nil here.  Returning "authPtr, nil" instead of "authPrt, err" might make it more clear.