com.sun.net.ssl.client {
    com.sun.security.auth.module.Krb5LoginModule required
    principal="USER@TEST.REALM"
    doNotPrompt=true
    useKeyTab=true
    keyTab="krb5.keytab.data";
};

com.sun.net.ssl.server {
    com.sun.security.auth.module.Krb5LoginModule required
    principal="host/service.localhost@TEST.REALM"
    isInitiator=false
    useKeyTab=true
    keyTab="krb5.keytab.data"
    storeKey=true;
};