additional settings for kerberos security