diff --git a/roles/minio-backups-cert/files/nsupdate-auth.sh b/roles/minio-backups-cert/files/nsupdate-auth.sh
index 720bfa2..57aba52 100755
--- a/roles/minio-backups-cert/files/nsupdate-auth.sh
+++ b/roles/minio-backups-cert/files/nsupdate-auth.sh
@@ -1,7 +1,7 @@
 #!/bin/sh
 
 export KRB5CCNAME=/run/certbot.krb5_ccache
-klist -s || net ads kerberos kinit -P || exit
+klist -s || kinit -kt /etc/krb5.keytab "$(hostname -s | tr a-z A-Z)"'$' || exit
 nsupdate -g <<EOF || exit
 zone $(dnsdomainname)
 update add _acme-challenge.${CERTBOT_DOMAIN} 10 TXT ${CERTBOT_VALIDATION}
diff --git a/roles/minio-backups-cert/files/nsupdate-cleanup.sh b/roles/minio-backups-cert/files/nsupdate-cleanup.sh
index be88f1a..ae8eedc 100755
--- a/roles/minio-backups-cert/files/nsupdate-cleanup.sh
+++ b/roles/minio-backups-cert/files/nsupdate-cleanup.sh
@@ -1,7 +1,7 @@
 #!/bin/sh
 
 export KRB5CCNAME=/run/certbot.krb5_ccache
-klist -s || net ads kerberos kinit -P || exit
+klist -s || kinit -kt /etc/krb5.keytab "$(hostname -s | tr a-z A-Z)"'$' || exit
 
 nsupdate -g <<EOF
 update del _acme-challenge.${CERTBOT_DOMAIN} TXT