The error-message interface added a while back works on a krb5_context. There isn't one shared between the kadmin program and the kadm5 library for the purpose of returning detailed error info, so such details will get lost. In the case of kadmin.local and database plugins, this will be important.