pub const POLICY_KERBEROS_VALIDATE_CLIENT: u32 = 128u32;