Disable kpasswd5 portion of kadmind ?

[Tim Metz]

Greetings,

As I understand it, the MIT kadmind daemon provides both the 
kerberos-adm(tcp/749) and the kpasswd5(udp/464) servers.
Is there any way to turn off the kpasswd5 portion of the daemon?  For 
instance, if we wanted to run only the kerberos-adm portion of the daemon?
We could just firewall the kpasswd5 service, just wondering however if 
there is a way to have kadmind run only the kerberos-adm server, and not 
the kpasswd server?

Thanks,

  - Tim