Is there a way to retrieve a Kerberos ticket for a different domain user from Azure AD? A scenario would be to use OAuth2 in a web application and have this application conn