I propose a stricter policy: Everyone trying to explain kerberos gets a ticket (ba-dum-tss)