Which statement is true for WS-Security Kerberos Token Profile?

A.
It leverages the SPNEGO protocol

B.
It can only be used for authentication

C.
It can be used to provide session-based security

D.
It can be used to provide asymmetric cryptography protection