Required groups for anonymous access
Since Kerberos authentication happens automatically without any user input, this feature is used to prevent some users from being logged in with Kerberos when they should stay un-authenticated to use anonymous browsing, i.e. not consuming a license.