tool: Use Kerberos for supported features