From this article its clear that SharePoint self hosted apps doesn't support Kerberos authentication unless "it is configured to use NTLM as a fallback authentication method"
Could any one be able to configure Kerberose authentication to use NTLM as a fallback authentication for provisioning users to login into apps.
Reference:
At the bottom of this article http://blogs.technet.com/b/sharepoint_-_inside_the_lines/archive/2013/06/23/404-amp-401-errors-with-the-app-management-service.aspx