use the hostname instead of localhost as front-facing url by default
log when kerberos is enabled but not supported
add firware rule for kerberos automatically