Each Kerberos ticket contains a set of flags which are used to
indicate various attributes of that ticket. Most flags may be
requested by a client when the ticket is obtained; some are
automatically turned on and off by a Kerberos server as required.
The following sections explain what the various flags mean, and gives
examples of reasons to use such a flag.