Stealing Domain Admin (or How I Learned to Stop Worrying and Love the CSSF