try a different approach for kerberos