These should probably be null (no explicit default) with a custom validator to check that they're all set if security is enabled (and don't set the Hadoop properties unless security is enabled).