Windows Credential Guard Kerberos Change Password Privilege Escalation

Windows Credential guard does not prevent using encrypted Kerberos keys to change a user’s password leading to elevation of privilege.