Seatbelt (Apple-specific privilege restriction) support for kadmind and KDC.