SENTRY-595: [UnitTest] In Kerberos mode, client should run under clientSubject
refactory
pool
support generic model