CLSA-2026-1786494875 Fix CVE(s): CVE-2022-38023

SECURITY UPDATE: netlogon secure channel allowed RC4/HMAC-MD5 downgrade and unsealed unencrypted use, permitting man-in-the-middle attacks - debian/patches/CVE-2022-38023.patch: change "reject md5 clients" and "reject md5 servers" defaults to yes, deprecate "allow nt4 crypto" and "reject md5...