lsadump::lsa can play with AD supplementalCredentials, with mimilib.dll