Critical Description
I recently updated a secure test cluster to trunk which includes the SPNEGO patches for image transfer, without updating my configuration. Predictably, the HTTP server won't initialize because I don't have the right principal set up for the server. But, the NameNode started anyway, and just rejects all image transfer requests with a 503. Instead, it should abort at startup if the SPNEGO filter fails to init.