The CredSpec format supports more than one gMSA being added ("additional accounts") and there are references in the Microsoft documentation (including here and here) that these can be used as "accounts [that] can be used by IIS App Pools, Windows Services, and any other application that supports running as a gMSA".

However I haven't been able to get it working and there is closed issue from 2016 that seems to indicate it's not supported (though 2016 is a very long time ago now) however since multiple places in Microsoft documentation says it's possible I'm struggling a bit to work out if it's me or the documentation.

So, does Moby support additional accounts in the credspec?