perhaps a downvoter can explain why Microsoft needed to fork, rather than get patches accepted upstream? Why didn't they take the Kerberos path like they did back in 2001 and just Embrace and Extend LibreSSL?