Point to alternatives location, not actual location
We should still run kerberos_init in default, since everything is guarded by configuration checks