Allow simpler authentication that takes place if Kerberos fails.
See Reference docs