Here is my proposed wording:
The [domain_realm] section provides a translation from hostnames to
Kerberos realms. Each tag is a domain name, providing the mapping for
that domain and all subdomains. If the tag begins with a period
(``.``) then it applies only to subdomains. The Kerberos realm may be
identified either in the realms_ section or using DNS SRV records.
Tag names should be in lower case. For example::