CVE-2026-20833 Kerberos RC4 Changes - Will services crash if they don't support AES decryption?
If your krbtgt account password hasn't been rolled since DFL 2003, then your password is RC4.