TestTokenClientRMService and TestRMDelegationTokens are faking kerberos authentication. The remote user ugis are explicitly created as kerberos but not the login user's ugi. Prior to
HADOOP-9747 new ugi instances defaulted to kerberos even if not kerberos. Now ugis default to kerberos only if actually kerberos based which causes the login user based tests to fail.