Group Managed Service Account is a better option than keytab if you're assuming Windows Server/Active Directory.