that's why kerberos is so terrible, it's like, sure, let's take an auth system invented by MIT, and let microsoft design something called SPNEGO