In the lead up to WS25 release, I thought I remember there being plans to include SHA2 variants of the AES Kerberos eTypes. But I don't see a way to turn that on via Group Policy. When will these etypes be available? With SHA1 deprecated and Linux distros that are in FIPS mode not wanting to use the legacy SHA1 etypes by default, we'd really appreciate SHA2 etypes getting turned on