If krb5kdc -r has really been broken since inception, we should think about whether we want to fix it, remove it, or replace it with the ability to serve multiple realms out of the same DB. The best answer may be "fix it"; if so, we should add automated tests to make sure it stays fixed.