[Unit]
Description=kinit -k update every 4 hours
ConditionPathExists=/etc/gss-principal

[Service]
Type=oneshot
EnvironmentFile=-/etc/gss-principal
ExecStart=/usr/bin/kinit -k $GSSPRINCIPAL -c /run/gssd/krb5cc_0

[Install]
WantedBy=multi-user.target