This could either be using the existing kerberos-security-factory and relax the requirement that we provide the path to a KeyTab and use the cache instead or a separate one.

Another option is we provide a variant that allows all options passed to the JAAS LoginModule to be specified to give more control.