config.kerberos shouldn't be a list