Follow #21265, the renew interval of kerberos ticket should be half of config::kerberos_expiration_time_seconds