- note that [pam] is still checked in addition to [appdefaults]
    - note that AFS and Kerberos IV support requires working Kerberos IV
      configuration files (i.e., kinit -4 needs to work) (doc changes
      suggested by Martin Schulz)