s4-credentials Don't use expired Kerberos or GSSAPI credentials