## access controls for the Kerberos KDC
root/admin@{{ ansible_domain | upper }} *
*@{{ ansible_domain | upper }} cil
*/*@{{ ansible_domain | upper }} i