All auth descriptors will have these flags on creation. If null, it will be set to the value in mandatory.
mandatory