I am going through Hortonworks documentation beeline vs hive cli and got to know that we can connect Hive using beeline using two different mode.
From the documentation it is clear that Remote transport mode supports authentication with LDAP and Kerberos. It also supports encryption with SSL.
I think both mode is quite the same, you should choose these mode base on your own cluster specification. I use embedded mode and it also supports Kerberos