/var/lib/sss/keytabs/ is in sssd-ipa 1.16.1-1ubuntu1.
This file is owned by root:root, with mode 0o755.