This reverts commit 4f70e931. We need separate main/krb5-conf to avoid cyclic buildtime dependency: krb5 -> opendldap -> heimdal -> krb5-conf.