sergeant: exclude /etc/krb5.conf