Add support for specifying a Kerberos CallbackHandler + isUsernameInServiceForm boolean