Use AD-KDCIssued to protect RADIUS authdata. Cleanup.