simplify krb5.conf