The kadmind in 1.2.4 is not known to be buggy in this way. At least it is believed to work with explicit principals on the ACL and I have used versions close to that with more complicated ACLs. I don't know why you are running into trouble.