I definitely think your solution is fine and is the best bullseye solution.
I'm a bit confused about your proposed change to krb5-config. People search for krb5-config by that name not with a multiarch tripple. If that became multi-arch dependent, how would you install more than one set of krb5 libs at the same time?
