Kerberos in the enterprise

The toy KDC captures the core; real deployments add SPNs (service principal names — the identities services register under), keytabs (the key files that let a service prove that identity without a password), and delegation — and a set of classic ticket-theft attacks. This judgement module has you reason about how Kerberos fits a real enterprise network and how its failure modes are mitigated.