[PATCH 0/3] allow the hub Kerberos principal to be defined