Nico noticed kinit -X attribute and krb5.conf option inconsistencies such as: kinit -X X509_user_identity=value krb5.conf pkinit_identity/pkinit_identities (and likewise for *_anchors) Is there a good reason for these to be diff? thx.