CRYPTO_POLICY='-oGSSAPIKeyExchange=no '