auth: Set correct flags in token_extractRxkad