Privilege Attribute Certificate (PAC) holds all of the user’s relevant information, and it is sent along with the TGT to the KDC to be signed by the Target LT Key and the KDC LT Key in order to validate the user. This relative new feature (later enforced in 2022) can help deter silver ticket attacks.