While the kadmin interface of the Heimdal KDC does support exporting keytabs for individual principals, the samba-tool (which tries somehow to resemble it) doesn't.
Fixed on master by Andrew Bartlett with 2bff209128b85bd870ad36fa00ffcc92edbbab08