ref. https://web.mit.edu/kerberos/krb5-1.12/doc/user/tkt_mgmt.html
mentioned in commit b8c9a006
merged