kerberos is sort of magic when/if you finally get it working