It looks like the MaxPacketSize is fixed and Kerberos should always use TCP.

But I'd check to verify the key just in case.

Turn on logging for a machine and see if when it fails you get anything.

Be sure to reboot after changing the key and setting up the test.