Here is my proposed wording:

The [domain_realm] section provides a translation from hostnames to
Kerberos realms.  Each tag is a domain name, providing the mapping for
that domain and all subdomains.  If the tag begins with a period
(``.``) then it applies only to subdomains.  The Kerberos realm may be
identified either in the realms_ section or using DNS SRV records.
Tag names should be in lower case.  For example::