The bit about only working on Java 6/Java 7 only applies to the Kerberos part.
the useSubjectCredsOnly=false line can be removed.