kerberos credential mediation sample