add non-HA kerberos auth 1