Comment 10 for bug 1696471

Rule we need is:
  /etc/gss/mech.d/ r,

To trigger we need "libsasl2-modules-gssapi-mit" installed.
That makes qemu read the dir.

In there one only defines additional plugins to be loaded, and I can understand that this might be needed by sasl.

I think it is safe to allow still and will submit something upstream.