On 26/04/2020 23:02, David Holmes wrote: > Hi Goetz, > > This will need a CSR request to change the default flag value. Yes, a CSR is needed for this. I also suspect it needs further security review too (JEP 358 acknowledges the security concern). -Alan.