Which two features does Kerberos security add to a Hadoop cluster?

User authentication on all remote procedure calls (RPCs)

Encryption for data during transfer between the Mappers and Reducers

Encryption for data on disk (“at rest”)

Authentication for user access to the cluster against a central server

Root access to the cluster for users hdfs and mapred but non-root access for clients