--delegation

Set LEVEL what curl is allowed to delegate when it comes to user credentials.

none

Do not allow any delegation.

policy

Delegates if and only if the OK-AS-DELEGATE flag is set in the Kerberos service ticket, which is a matter of realm policy.

always

Unconditionally allow the server to delegate.