#!/bin/sh
export KRB5CCNAME=/run/certbot.krb5_ccache
klist -s || kinit -kt /etc/krb5.keytab "$(hostname -s | tr a-z A-Z)"'$' || exit
nsupdate -g <<EOF
update del _acme-challenge.${CERTBOT_DOMAIN} TXT
send
EOF
kdestroy