Nice article.

We could not keep up with performance issues caused by using hibernate ("experts" consulted, etc.). We finally convinced our management that hibernate is a development tool...

Delegation authority in AD for allowing an account permission to modify SPN can be found here.

Perhaps the issue is that your workstation does not have a valid kerberos KDC key issued at your AD server. If this is the case you need to reboot...