KRB5_CONF_MAX_RENEWABLE_LIFE
hierarchy[2] = KRB5_CONF_MAX_RENEWABLE_LIFE;
KRB5_CONF_MAX_RENEWABLE_LIFE, 0);