package: krb5 version: 1.17-3 severity: normal There's no good reason for krb5 not to use dh. I think we may need to override a bit of stuff related to multidev and building docs, but those are the only unique things about the krb5 package.
I'm opening a tracking bug to remind me to do the work post buster release.