msDS-KeyCredentialLink, PKINIT abuse, AD certificate backdoor, key trust
Press ? anytime to show this help