Kafka with kraft is not really dynamic because it supports only plain. PLAIN is not really as comfortable and secure as SCRAM auth – you can only add users with full restart of the cluster.
Ref: https://forum.confluent.io/t/self-hosted-kafka-with-kraft-ssl-and-sasl-scram-sha-256/8863/3