the RPC Client has an inelegant way of handling expiration of TGTs
acquired via a keytab.  any connection failure causes a relogin, so
the Client needs to know what authMethod was being attempted if an
exception occurs.  the SASL prep for a kerberos connection should
ideally relogin if necessary instead of exposing this detail to the
Client