This broke as of #456065. krb5Full rename started way back in 2022 with #201707, and I guess ipa.nix was overlooked.
readOnlyPkgs
preferLocalBuild = true