allow Kerberos, fix #38, fix #39