Client-to-node encryption and Kerberos auth support