NTLM Acceptor does not authenticate credentials

Maybe I'm doing something wrong here but it doesn't look like the NTLM security package is validating the credentials at all as an acceptor. It does a few things like validate the bindings or the encrypted random session key but I cannot see it verifying the NT hash received matches the known credential provided in the inbound credential handle.

Start by tracing the NTLM security package's acceptor flow from the inbound credential handle and compare it with the existing binding and encrypted-session-key validation. Determine where credential verification is expected and inspect any related tests. Done means the acceptor rejects invalid credentials and accepts known valid credentials.

Written by the indexing model from the issue text.