Single sign-on to DirectQuery sources via Kerberos