Add two new parameters. The first is to add a line to the krb5.conf file
indicating that we prefer TCP. The other is a parameter stating which
kerberos environment we want: prod, test, or uat.

If the system's primary IP address is in one of the two well-known Livermore
netblocks, then automatically set the Livermore-based Kerberos server as the
primary KDC.

base::kerberos::dr is now deprecated.

Remove base::kerberos filter-syslog rules.  These only had rules for
ksu, which we no longer use, so they're now pointless.

This is the (old) master branch along with the fixes to the
cron file permissions that Russ made.