Sure, but why does systemctl complain about rpc-svcgssd.service, if there are no NFS credentials inside? Its perfectly fine to run NFS without cryptographic security, even though /etc/krb5.keytab does exist. I have the impression that the conditionals you mentioned are not complete.