Hi Boxuan,
Using existing mechanisms for configuring mapreduce would be nicer, indeed.
Upon reading this hadoop command, I see a GENERIC_OPTIONS env variable read by the mapreduce client, that can have a -files option. Maybe it is possible to include a jaas file that points to the (already installed?) keytab file on the workers?
Best wishes, Marc