I know of no way to dump an MIT database unencrypted. Also, the current master key conversion code in MIT does not support changing the enctype of the master key. The real problem is the kadmin/history principal. Patches to add support for master key enctype conversion would be welcome. --Sam