CRYPTO_POLICY='-oGSSAPIKeyExchange=no'