delegation token
A checksum over EPAC data, encrypted in the Privilege Server's key and placed in the A_D field of a PTGT. The token is placed in the A_D field by the Privilege Server when it enables delegation and when it generates a new delegation chain or impersonated identity.