Searching protocol for "golden certificate"
Forge AD persistence via certificate abuse.
Establish persistent AD access.
Dynamic Vault SSH credentials for AAP.