krb5-keytab-backend - 1.7 main

keytab-backend is a service that runs under remctld and allows
authenticated clients to download Kerberos keytabs from an MIT Kerberos
KDC without changing the key stored in the Kerberos KDC. It must run on
the same host as the Kerberos KDC and uses kadmin.local to extract the
existing key. It applies additional ACLs to limit which keys may be
extracted in this way. This interface is not needed for Heimdal.