+# A normal kerberos-config package would just create an
+# /etc/krb5.conf.invirt file (probably using the DEB_TRANSFORM_FILES
+# syntactic sugar, instead of calling the transform script directly).
+# However, we want to generate that file dynamically, based on the realm
+# setting in /etc/master/invirt.yaml. So, instead of packaging
+# krb5.conf.invirt, we build a mako template in
+# /etc/krb5.conf.invirt.mako, and our initscript renders it to
+# /etc/krb5.conf.invirt. In order to get the mako template right, we
+# generate it by transforming the base krb5.conf to add a mako template
+# tags specifying the default realm.