--- request-key.conf
+++ request-key.conf
@@ -34,4 +34,6 @@
 create	user	debug:*		negate		/bin/keyctl negate %k 30 %S
 create	user	debug:loop:*	*		|/bin/cat
 create	user	debug:*		*		/usr/share/keyutils/request-key-debug.sh %k %d %c %S
+create	cifs.spnego	*	*		/usr/sbin/cifs.upcall -c %k
+create	dns_resolver	*	*		/usr/sbin/cifs.upcall %k
 negate	*	*		*		/bin/keyctl negate %k 30 %S