I'm not entirely sure either. One thing to consider is that Debian's openldap doesn't typically use schema files; it instead uses the ldap configuration schema, so you'd need to produce an ldif of the schema and submit that to Kerberos. That is in fact a major pain and I'm open to thoughts about how to improve this.
Including it as a documentation/example makes it clear that the user needs to deal with enabling the schema in their ldap server. However if we can better automate that would be good. --Sam
