Weaknesses and Best Practices of Public Key Kerberos with Smart Cards