The command 'net ads keytab' is lacking a 'remove' sub command. There is no easy way to remove a SPN entry from keytab and the according entry from AD. This is the counterpart to 'net ads keytab add'.