A forged token signed with the real key is not a break-in. It is a credential. The mechanism behind AD FS token forgery, what ...