ACL_MIGRATE
if (kadm5int_acl_check(handle->context, name, ACL_MIGRATE,
{ 'u', ACL_MIGRATE }, /* pam_krb5_migrate */
ACL_MIGRATE | \