Fixed in krb5-1.2.3 along with the whole single-DES enctype mess.