1) please make sure you're right for domain_realms both for MIT and Heimdal; the leading dot used to not be implied by not leading dot.
2) I think mentioning the enctypes entries in comments is valuable but I think having uncommenting entries is undesirable. Besides that decrufting is good. I wonder if we can support /etc/krb5.conf.d. I guess the big question is whether Heimdal supports that. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org