Thanks for the prod. I think I can do what you need, but probably not in the way you suggest.
I'm finding that finishing out my DPL term is taking up enough of my time that I don't really want to pull in a new krb5 upstream right now. However it looks like pulling in the patches to the doc build machinery shouldn't be bad at all. My plan is to do something to remove the python2 dependency in the next couple of days for you. I'd prefer to handle the new upstream krb5 in May if I can. But I'll do something, because I understand this is important.