Relaying Kerberos to AD CS is still the fastest path to domain admin

https://ocd-labs-preview.alpina-tech.org/articles/kerberos-relay-adcs/