Title: #5450: kcm: add support for kerberos tgt renewals
> But I wonder if it would be better to keep the idle timeout
What's wrong with keeping an idle process "running"? Sleeping process with
small memory footprint shouldn't have any resource implications, right?
It's not sleeping, it still spins in tevent loop doing stuff which may have a negative
impact on battery. The impact from a single process may not be significant, but there are
lots of such processes so if it can be avoided it is certainly welcomed. However,
there's nothing wrong about it per say. It just makes sense to me to keep KCM a short
lived service, especially since it will also reduce the amount of code that is required to
provide the functionality.
See the full comment at https://github.com/SSSD/sssd/pull/5450#issuecomment-799376424