Defines the minimum client compatibility.
Allows the private key to be exported.
Require user input when using the private key for enrollment.