assertEquals(USER_REALM, ticket.getUserRealm());
        }
    }

    // Note: Testing the code path where keys are null and retrieved from
    // KerberosCredentials requires mocking the constructor of KerberosCredentials,
    // which is not possible with standard Mockito. A tool like PowerMock would be needed.

                byte[] crypt = encOctets.getOctets();

                if (keys == null) {
                    try {
                        keys = new KerberosCredentials().getKeys();
                    } catch (LoginException e) {
                        throw new PACDecodingException("Login failure", e);
                    }
                }