public <T> T doAs(Callable<T> callable) {
    // if disableAuth, use process ugi to execute
    if (disableAuth
        || CatalogMetaProperties.AUTH_CONFIGS_VALUE_TYPE_AK_SK.equalsIgnoreCase(authMethod)) {
      return call(callable);
    }
    return Objects.requireNonNull(getUGI()).doAs((PrivilegedAction<T>) () -> call(callable));
  }
For Kerberos authentication, krb5.conf and keytab files need to be written in TM, and method
files need to be locked in-process exclusive locking
amoro-common/src/main/java/org/apache/amoro/table/TableMetaStore.java