Use abstractions where possible

apparmor.d/profiles-g-l/kdestroy

@@ -9,16 +9,13 @@ include <tunables/global>
 @{exec_path} = @{bin}/kdestroy
 profile kdestroy @{exec_path} {
   include <abstractions/base>
+  include <abstractions/kerberosclient>
 
   #Allow root to destroy other users' creds cache
   capability dac_override,
 
   @{exec_path} mr,
 
-  #Config Files
-  /etc/krb5.conf r,
-  /etc/krb5.conf.d/{,**} r,
-
   #Credentials cache
   /tmp/krb5cc_* rwk,
   /tmp/tkt* rwk,