I think `/etc/foreman-proxy/freeipa.keytab` might be best.