This was resolved by forcing the DNS flags to be set during the Pismere grafting. DNS support will still not be auto-built on standalone krb5 builds.