/usr/share/gnome/help/krb5-auth-dialog/es/figures/trayicon-valid.png is in krb5-auth-dialog 3.2.1-1+deb7u1.
This file is owned by root:root, with mode 0o777.
It is a symlink to /usr/share/gnome/help/krb5-auth-dialog/es/figures/../../C/figures/trayicon-valid.png