Am I going to run into any trouble if use a CNAME that redirects to my KDCs actual hostnames instead of explicitly listing all of them in krb5.conf on the clients? That way I wouldn't have to copy new krb5.confs to the client hosts, just update the DNS entry.