kerberos kclient: switch to ksh