Comment 24 for bug 1849346

if the goal is to have a single snap making use of the kerberos ticket, as a workaround you can put something like this in /etc/krb5.conf

[libdefaults]
        default_ccache_name = DIR:/home/%{username}/snap/firefox/common/.cache/.k5_ccache

the default connections for the firefox snap prevent it to read hidden files under $HOME, so we help it a little. Seems to work so far

* not ideal for security though as Firefox snap has direct access to the TGT.