Thanks for raising the bug. The slapd autopkgtest does a chgrp/chmod to grant slapd access to the heimdal master key, but the permissions on the containing directory (/var/lib/heimdal-kdc) became more restrictive (now 700). I will update the autopkgtest ASAP.