Welcome to the Centrify Express forums.
Moderation notice: try to de-identify the output of your commands in the future.
Kerberos Flexible Authentication Secure Tunneling (FAST) a.k.a Kerberos Armoring is going available in the next version of your client (Suite 2017) for all UNIX, Linux and Mac platforms.
Perhaps your AD administrators turned on FAST for the OU in question?? As an alternative, you could try to join an OU that does not have the FAST GPOs enabled.
Note: commercial customers get early access benefits.
R.P