The only tests using kadmin/passwd are the kadmin/passwd unit tests. We could easily excise that subtree, but some of the tests aren't duplicated elsewhere (changing to same password, password in dictionary, character class requirements).