BTW I don't think you actually need a conflict with libsasl2-krb4-mit. Disturbingly, it actually works against the new library at least in practice.