The kdb5_util code unfortunately does not allow you to change encryption key types when it changes the masetr key. It is a fairly simple change to the source to do this as a one-time hack, but it is not in the current code.