question and answer about kerberos