forwarded Kerberos 5 credentials, so that the process that needs them can actually find them.
a file credential cache (rather than a memory credential cache) so that they're useful.