* get patches applied upstream

** add comments to patch files

** gdt emailed patches to upstream about 20201006

* resolve ssl being default on, on macos

* resolve kerberos build failures (wait for upstream)

* test

