moved very stroke specific x509 flag handling out of core library