The new configuration option `simple_ldap_linking_allowed_realms'
allows custom Kerberos realms to be specified for linking LDAP
identities.