If you have renewable and renewable_ok both set in kdc options and request tickets with a longer lifetime than allowed by KDC policy but provide a much longer rtime in the request, our KDC will ignore the rtime and give you tickets renewable only as long as your lifetime allowed.