## access controls for the Kerberos KDC
*@{{ ldap_domain | upper }} cil
*/*@{{ ldap_domain | upper }} i