# Leave this section out on the clients
# See the kadmind(8) man page for a full description of this file.

# joe/admin@EXAMPLE.COM      all
# mallory/admin@EXAMPLE.COM  add,get-keys  host/*@EXAMPLE.COM