AMBARI-8853. Configuration keys in Kerberos descriptors should allow for variable replacement. (robert levas via jaimin)