Policy says that one package can't mess with another package's configuration. That is, it's not really OK from a policy POV for anything besides krb5 to mess with the configuration files for krb5. However, you can of course coordinate other things. I can dig up specific citations if you'd like. but I think the implication for freeipa and krb5 is that the two of us need to work together, and so long as we coordinate it's fine.
--Sam
