The text d3e09a9b3db8, as Debian 7 (Wheezy) shipped it.
Kerberos V5 client principal selection rules
k5identity(5) on Linux now