[thyristan]

Well, yes, almost totally in agreement, but: MIT Kerberos (the implementation) started out as "research-quality" code of the 1990s era. It has improved, it fares far better than AD, but the occasional exploits still continue to drop.

https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=kerberos