Move authn section of master.yaml to new kerberos section