Explicitly forward kerberos tokens in create-user