https://www.grouppolicy.biz/2016/10/securing-credentials-for-privileged-access/