Provide a way to specify identity settings in various granularities.  
I.e.: if '[Krb5Realm] == "foo.com"' enable sticky or 
'[Name] =~ '.*,cn=MIT,.*' disable renew.

This would be very useful for organizations that wish to setup 
configuration for their user's identities when they do not yet
know what the identity name will be.