* get patches applied upstream
** add comments to patch files
** gdt emailed patches to upstream about 20201006
* resolve ssl being default on, on macos
* resolve kerberos build failures (wait for upstream)
* test