You'll need to allow /etc/gss/mech.d/ r,
and after that, I wouldn't be surprised if you get denials for files inside this directory ;-)
You'll need to allow gss/mech. d/ r,
/etc/
and after that, I wouldn't be surprised if you get denials for files inside this directory ;-)