+To change the supported enctypes, run `kadmin`:
+
+ kadmin -p daemon/kronborg.mit.edu -k -t daemon.kronborg.keytab
+
+From within `kadmin`, to create new keys:
+
+ ktadd -k daemon.kronborg.keytab -e aes256-cts:normal -e aes128-cts:normal daemon/kronborg.mit.edu
+
+After all tickets currently issued against your service expire (which will happen after at most one day), you should remove the old keys from your keytab. If there are no outstanding tickets, you can do this from within `kadmin`:
+
+ ktremove -k daemon.kronborg.keytab daemon/kronborg.mit.edu old
+
+Before exiting, you may wish to verify in a separate terminal that the correct updated key has been written to the keytab:
+
+ kinit -k -t daemon.kronborg.keytab daemon/kronborg.mit.edu
+ kvno daemon/kronborg.mit.edu@ATHENA.MIT.EDU