Hardening Kerberos to Avoid Golden Ticket and Pass the Hash Vulnerabilities