Feature Request: Check for Constrained Delegation to krbtgt

[f-bader]

Please include a check for any Service Accounts with a Constrained Delegation to the KRBTGT service.

Property: msDS-AllowedToDelegateTo Value: krbtgt/DOMAIN

Reference: https://skyblue.team/posts/delegate-krbtgt/