s4-auth/kerberos: Use FAST credentials for armor if specified in cli_credentials