apache: use HTTP for mod_auth_kerb service principal