basically, it would be nice if a switch could be added to offer a keytab to kadmin to authenticate from, and add a call to kadm5_c_init_with_skey_ctx in that case instead of kadm5_init_with_password_ctx in that case. a 30 second hack but the problem is the obvious option, -k, already designates a master key file to use for local mode. -D