[CentOS] forestalling kerberos for a non-kerberos user