net: add "-k" switch for kerberos authentication (in preparation for #5416).