Automatically add HTTP/<FQDN> SPN to machine account and update
keytab when joining domain or refreshing keytab. This allows web
services to use system keytab /etc/krb5.keytab instead of separate
service account keytabs.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>