s3-kerberos: also try with AES keys, when decrypting tickets.