Kerberos 'Pass-The-Hash' fix for recent versions of Windows
* disable AES for key encryption