MS recommendation is to regularly change the Kerberos krbtgt password. If the OPF service is running when that happens, it immediately crashes the DC and the password change fails.
I'm running this on Server 2012R2, fully patched. DFL/FFL = 2012R2
Here's the MS-written krbtgt password change script: https://gallery.technet.microsoft.com/Reset-the-krbtgt-account-581a9e51
Here's the crashing event details:
