debian: implement Kerberos autodetection in rules