MS Kerboros addenda: "The fields are defined as follows: include-pac - This field indicates whether a PAC should be included or not. If the value is TRUE, a PAC will be included independent of other preauth data. If the value is FALSE, then no PAC will be included, even if other preauth data is present. The preauth ID is: #define KRB5_PADATA_PAC_REQUEST 128