CanonicalizeHostname always
CanonicalizeMaxDots 0
CanonicalDomains ${domain}
CanonicalizePermittedCNAMEs *.${domain}:*.${domain}
KnownHostsCommand /usr/local/libexec/idm-ssh-known-hosts %H

Host *.${domain}
  GSSAPIAuthentication yes
  GSSAPIDelegateCredentials yes