If a user's .k5login
file is a symlink, Puppet will overwrite the
link's target when managing that user's login file with the k5login
resource type. This allows local privilege escalation by linking a
user's .k5login
file to root's .k5login
file.