The text bd5d23a9e51d, as Debian 9 (Stretch) shipped it.
Kerberos V5 client principal selection rules
k5identity(5) on Linux now