add non-HA kerberos auth