document KRB5_CONFIG