doc: add release notes for the openafsServer.authentication options

nixos/doc/manual/release-notes/rl-2411.section.md

@@ -376,6 +376,8 @@
 
 - Gollum was upgraded to major version 6. Read their [migration notes](https://github.com/gollum/gollum/wiki/6.0-Release-Notes).
 
+- The OpenAFS server module now supports the automatic extraction of service authentication keys from a Kerberos 5 keytab. Just specify the runtime path of the keytab and (optionally) the principal representing the AFS cell as the values of `services.openafsServer.authentication.keytab` and `services.openafsServer.authentication.principal`, respectively. The old behavior of using a pre-existing `/etc/openafs/server/KeyFileExt` managed by the `asetkey` command is retained by default.
+
 - The hooks `yarnConfigHook` and `yarnBuildHook` were added. These should replace `yarn2nix.mkYarnPackage` and other `yarn2nix` related tools. The motivation to get rid of `yarn2nix` tools is the fact that they are too complex and hard to maintain, and they rely upon too much Nix evaluation which is problematic if import-from-derivation is not allowed (see more details at [#296856](https://github.com/NixOS/nixpkgs/issues/296856). The transition from `mkYarnPackage` to `yarn{Config,Build}Hook` is tracked at [#324246](https://github.com/NixOS/nixpkgs/issues/324246).
 
 - Cinnamon has been updated to 6.2.