Use the client, provider or consumer for krb5/LDAP as specified in single_sign_on. krb5_* and ldap_* are now all mutually exclusive