plaintext flag authority payload
