[Unit]
Description=kinit -k on resume
After=suspend.target
ConditionPathExists=/etc/gss-principal

[Service]
Type=oneshot
EnvironmentFile=-/etc/gss-principal
ExecStart=/usr/bin/kinit -k $GSSPRINCIPAL -c /run/gssd/krb5cc_0

[Install]
WantedBy=suspend.target