Wether unsecure basic should be provided if Kerberos fails.
See Reference docs