The text 8a01c3cf5c9a, as Debian 12 (Bookworm) shipped it.
Kerberos V5 client principal selection rules
k5identity(5) on Linux now