AMBARI-8177. ATS should remain enabled after kerberization, and keytab owner should be yarn (alejandro)