Connecting to the host
The new session key, which is shared by only the client and the target host, can be used to establish an encrypted session between the client and the host.
At this point the Client’s TGT can be forwarded to the target host and used to make further connections