Securing a Fuse endpoint with Kerberos/spnego in CXF

Issue

• We have a CXF endpoint deployed to Fuse container that accepts and processes requests from a remote web service consumer. We have been asked to apply Kerberos/spnego authentication to this endpoint. Are there any examples or documentation that describe how to apply Kerberos/spnego authorization to a CXF endpoint that is deployed in a Fuse container?
• We see some information specific to configuring Jetty for spnego and other documentation on Kerberos with CXF documentation but it would help me to see a specific example of configuring Kerberos/spnego on an endpoint defined in a blueprint.xml file.