Reported by Arfrever.
Created attachment 696546 [details, diff] allow-heimdal.patch (from Arfrever upstream)
Also dependency on virtual/krb5 should be conditional on "kerberos" USE flag.
Created attachment 696552 [details, diff] Patch