Use delegated kerberos credentials

If the kerberos ticket is created with forwarding, and the browser allows them to be delegated, then use the delegated kerberos ticket to connect to other machines via SSH.