During December 2025, Matthieu contributed to the openbao/openbao repository by developing a new decode_pac option for the Kerberos credentials plugin. This feature decoupled Kerberos interoperability from mandatory PAC data, allowing deployments to function seamlessly across FreeIPA and MIT Kerberos environments where PACs may not always be present. Matthieu implemented the solution using Go, focusing on backend and API development, and ensured robust integration by updating related Kerberos tests and applying lint fixes. He also revised documentation to guide users on the new option, demonstrating a thorough approach to both code quality and user support within the project’s scope.