The Kerberos option does not do a Kerberos auth.
I will fix that using the new cmdline parser I'm working on.
This bug was referenced in samba master: 32a71e50b49db2b06ea7a8a2b8aa0606b0455f1f
Will be fixed with Samba 4.15 in autumn.