Kerberos SSO authentication

Implements basic kerberos SSO authentication.
The hostnames are inconsistent here, x0.cockpit.lan vs my-machine.cockpit.lan (vs my-server.domain.com above).