Function deserialize_kinit_arg 

fn deserialize_kinit_arg<'de, D>(
    deserializer: D,
) -> Result<Option<String>, D::Error>
where
    D: Deserializer<'de>,

Rejects values that could escape the quotes in KINIT_CMD or be parsed as a kinit flag.