Where GSSAPI is in use in the CLI we need to be able to switch off prompting the user for their password, we also have issues depending on the JDK version where an error is reported if a file can not be found to be loaded.

In general we need a best efforts use the configuration of the JVM with a quiet fallback to default domain definitions with the appropriate Krb5LoginModule definitions.