VMS Help DCE_SECURITY, Admin Intro, rgy_edit, key_management_commands, ktdelete  *Conan The Librarian (sorry for the slow response - running on an old VAX)

   ktd[elete] -p principal_name -v version_number [-f keyfile]

   Deletes a sever or machine principal's password entry from a keytab
   file.

   The -p option specifies the name of the server or machine principal
   for whom you are deleting a password entry.

   The -v option specifies the version number of the password you want
   to delete.  Version numbers are assigned to a principal's password
   whenever the principal's password is changed.  This allows any
   servers or machines still using tickets granted under the old pass-
   word to run without interruption until the ticket expires naturally.

   The -f option specifies the name of the server keytab file on the
   local node from which you want to delete passwords. If you do not
   specify a keytab file name, dce$local:[krb5]v5srvtab.; is used.
   Note that you must be privileged to delete entries in the default
   keytab file.  You must have the appropriate access rights to
   delete entries in other keytab files.