sssd needs to be able write krb5.conf.