diff --git a/pinecrypt/server/const.py b/pinecrypt/server/const.py
index 3669d12..35ae86c 100644
--- a/pinecrypt/server/const.py
+++ b/pinecrypt/server/const.py
@@ -146,7 +146,7 @@ REQUEST_SUBNETS = getenv_subnets("AUTH_REQUEST_SUBNETS", "0.0.0.0/0 ::/0").union
 CRL_SUBNETS = getenv_subnets("AUTH_CRL_SUBNETS", "0.0.0.0/0 ::/0")
 OVERWRITE_SUBNETS = getenv_subnets("AUTH_OVERWRITE_SUBNETS", "")
 MACHINE_ENROLLMENT_SUBNETS = getenv_subnets("AUTH_MACHINE_ENROLLMENT_SUBNETS", "0.0.0.0/0 ::/0")
-KERBEROS_SUBNETS = getenv_subnets("AUTH_KERBEROS_SUBNETS", "0.0.0.0/0 ::/0")
+KERBEROS_SUBNETS = getenv_subnets("AUTH_KERBEROS_SUBNETS", "")
 PROMETHEUS_SUBNETS = getenv_subnets("PROMETHEUS_SUBNETS", "")
 
 BOOTSTRAP_TEMPLATE = ""