[Freeipa-users] HBAC and Kerberos.