add krb5 glue for userok