#!/bin/sh
export KRB5CCNAME=/run/certbot.krb5_ccache
klist -s || net ads kerberos kinit -P || exit
nsupdate -g <<EOF
update del _acme-challenge.${CERTBOT_DOMAIN} TXT
send
EOF
kdestroy