[PATCH] support CNAMEs with Kerberos auth