puppet-kerberos/templates/kpropd.acl.erb

<% @kdcs.each do |kdc| -%>
host/<%= kdc %>@<%= @realm %>
<% end -%>