Remember that in the past krb5_kt_default could not be used for writable keytabs because that was a separate keytab type. I realize we fixed that, but it is not unheard of in Kerberos history to encourage people to specify what writable keytab they need.