s4:credentials Add hooks to extract a named Kerberos credentials cache