Either sec=sys or sec=krb5(i,p) work but not both

When exporting NFS shares, I would like to have shares with sec=krb5i and shares with sec=sys at the same time.

But for some reason, this does not work anymore since the upgrade to freenas 11.3. 

I can either enable "Require Kerberos for NFSv4" and mount the shares using sec=krb5i or disable it and only mount the shares with sec=sys. In the latter case, nfsd complains:  nfsd: can't register svc name. A sample /etc/exports looks like this:

V4: / -sec=sys:krb5:krb5i:krb5p 
/mnt/data/folder1 -maproot="root":"wheel" -sec=krb5:krb5i:krb5p HOST 
/mnt/data/folder2 -maproot="root":"wheel" -sec=sys IP

The aforementioned checkbox only seems to affect the first line and determines whether "sys" is present or not.

How can the old behavior (freenas 11.2 and older) be restored, that both work at the same time?