Article explains how to use the adkeytab command for service accounts. This can be scripted eliminated the need for using password - courtesy Robertson (SE)
All versions of Centrify DirectControl
How can one use the Centrify Kerberos utilities and an AD account to create a service account that can be used in scripts (or with DB2 with the Centrify Plugin), eliminating the need to know the password altogether?.
There is a word doc attached to this article which goes over the steps.