Kerberos lock picking