Enforce the principle of least privilege, limit the number of service accounts, enable two-factor authentication, and use security tools that detect Kerberoasting attempts.