Can you summarize briefly the workflow for authenticating with kerberos?