mandatory

All auth descriptors must have these flags to exist