[gssproxy]service/HTTP example: why use a separate keytab?