security: Kerberos init step can be called multiple times