Allow NFS mounted with host key to read everything in a kerberized NFS share

I have a TrueNAS system that my hosts can connect/mount into, to write they should need to have a valid ticket by my KCM, but to read, certain mount points should be able to be read by any host that is enabled. I tried to make my ACL rules to match everyone@ read/traverse, but that seems to not match the "other" that traditional posix has. I think what I want is the other equivalent when the user is "nobody"/unknown.