Title: #5450: kcm: add support for kerberos tgt renewals
Thank you for your patience, last two nitpick in code and we can push.
And perhaps different wording for the release notes (fill in the version):
:feature: Added support for automatic renewal of renewable TGTs that are stored in
KCM ccache. This can be enabled by setting `tgt_renewal = true`. See the sssd-kcm man
more details. This feature requires MIT Kerberos X.Y.Z
See the full comment at https://github.com/SSSD/sssd/pull/5450#issuecomment-834622746