msds-allowedtoactonbehalfofotheridentity 1 Exploiting Resource-Based Constrained Delegation (RBCD) Jan 6, 2025