auth/credentials: don't ignore "client use kerberos" and --use-kerberos for machine...