Packages that rely solely on Java or PHP are not problematic to install from Testing. That's what I do here. The suggestion for apt_prefernces Package: * Pin: release a=testing Pin-Priority: -1 does unfortunately not hinder dselect from installing libk5crypto3. Any other suggestions? Regards, Adrian.