document --disallow-getting-krbtgt and --door-path

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15305 ec53bebd-3082-4978-b11e-865c3cabbd6b

kcm/kcm.8

@@ -50,6 +50,7 @@ is a process based credential cache for Kerberos tickets.
 .Xc
 .Oc
 .Op Fl -max-request= Ns Ar size
+.Op Fl -disallow-getting-krbtgt
 .Op Fl -detach
 .Op Fl h | Fl -help
 .Oo Fl k Ar principal \*(Ba Xo
@@ -73,6 +74,10 @@ is a process based credential cache for Kerberos tickets.
 .Fl -socket-path= Ns Ar path
 .Xc
 .Oc
+.Oo Xo
+.Fl -door-path= Ns Ar path
+.Xc
+.Oc
 .Oo Fl S Ar principal \*(Ba Xo
 .Fl -server= Ns Ar principal
 .Xc
@@ -138,6 +143,12 @@ system cache group
 .Xc
 max size for a kcm-request
 .It Xo
+.Fl -disallow-getting-krbtgt
+.Xc
+disallow extracting any krbtgt from the
+.Nm kcm
+daemon.
+.It Xo
 .Fl -detach
 .Xc
 detach from console
@@ -176,6 +187,10 @@ renewable lifetime of system tickets
 .Xc
 path to kcm domain socket
 .It Xo
+.Fl -door-path= Ns Ar path
+.Xc
+path to kcm door socket
+.It Xo
 .Fl S Ar principal ,
 .Fl -server= Ns Ar principal
 .Xc