sudo with Kerberos authentication privilege escalation

sudo fails to check granted tickets match to requested service, making it possible to use faked Kerberos server...