These flags are defined for the standard security handlers, you can not rely on other handlers implementing the same logic.
todo 2 refactor, make independent od StandardSecurityHandler