anchor.diff:  --superuser_acl=hadoopadmin
   ```
   
  +See <<sentry-configuration>> to see an example of how to enable fine-grained
  +authorization via Apache Sentry.
  +
   Further information about these flags can be found in the configuration
   flag reference.
   // TODO(todd) add a link
  
positive.code: Unauthenticated users on the same network as the Kudu servers will be unable
  to access the cluster.
  
  == Encryption
  
  Kudu allows all communications among servers and between clients and servers
  
negative.code: External PKI:: Kudu does not support externally-issued certificates for internal
  wire encryption (server to server and client to server).
  
  On-disk Encryption:: Kudu does not have built-in on-disk encryption. However,
  Kudu can be used with whole-disk encryption tools such as dm-crypt.
  
  