What you seek is definitely possible. See the article below, it includes setup steps for Kerberos as well as the rules to achieve Kerberos with NTLM fallback.
Do you have Kerberos setup yet by chance?
I can confirm, it works.
We use Kerberos with NTLM fallback as described by setup guide above.
Thanks guy. will look into the doc.. appreciate it.