Decrypt DPAPI secrets with the domain backup key

With the domain DPAPI backup key from a DC, you can decrypt any user's masterkeys and the browser, vault, and RDP secrets they protect, offline.