add kerberos ticket check/create