on console, get Kerberos realm from config