Why does Kerberos authentication fail using the Smoothwall Proxy Pac?