[Freeipa-users] Re: HBAC and Kerberos.