Hi, I am trying to implement a HDFS Source connector that can collect files from Kerberos enabled HDFS. As per the Kerberos support, I have provided my keytab file to Job Managers and all the Task Managers. Now, I understand that keytab file is a security concern and if left unsecured can be used by hackers to gain access to HDFS. So I wanted to understand if there's a way to encrypt this file on storage (at rest) and later decrypt before JM and TMs can initialize the KerberosModule? Or if there any other standard practices in controlling the keytab access from Storage. Would appreciate some ideas.
Thanks