// map header, size 4
	// write "Uptime"
	err = en.Append(0x84, 0xa6, 0x55, 0x70, 0x74, 0x69, 0x6d, 0x65)
	if err != nil {
		return
	}
	err = en.WriteInt64(z.Uptime)
	if err != nil {
		err = msgp.WrapError(err, "Uptime")
		return
	}
	// write "ReplicationStats"
	err = en.Append(0xb0, 0x52, 0x65, 0x70, 0x6c, 0x69, 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x53, 0x74, 0x61, 0x74, 0x73)

    static final Name UNKNOWN_NAME = new Name("0.0.0.0", 0x00, null);
    static final NbtAddress UNKNOWN_ADDRESS = new NbtAddress(UNKNOWN_NAME, 0, false, B_NODE);
    static final byte[] UNKNOWN_MAC_ADDRESS = { (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00 };

    static final class CacheEntry {
        Name hostName;
        NbtAddress address;

        // 2 bytes for fileAttributes, 4 bytes for lastWriteTime, 4 bytes for fileSize
        byte[] buffer = new byte[20];
        // File Attributes: 0x0010 (Directory)
        buffer[0] = 0x10;
        buffer[1] = 0x00;
        // Last Write Time (UTime): A sample timestamp in milliseconds
        long sampleTimeMillis = 1672531200000L; // Represents a specific date in milliseconds

                new byte[] { (byte) 0x78, (byte) 0xa0, (byte) 0x7b, (byte) 0x6c, (byte) 0xaf, (byte) 0x85, (byte) 0xfa });

        // 64-fold("Rough Consensus, and Running Code")
        verifyNfold("Rough Consensus, and Running Code", 8,
                new byte[] { (byte) 0xbb, (byte) 0x6e, (byte) 0xd3, (byte) 0x08, (byte) 0x70, (byte) 0xb7, (byte) 0xf0, (byte) 0xe0 });

        // 64-fold("kerberos")

        assertEquals(0x20, SecurityInfo.ATTRIBUTE_SECURITY_INFO);
    }

    @Test
    @DisplayName("Test SCOPE_SECURITY_INFO constant value")
    void testScopeSecurityInfo() {
        assertEquals(0x40, SecurityInfo.SCOPE_SECURITY_INFO);
    }

    @Test
    @DisplayName("Test BACKUP_SECURITY_INFO constant value")
    void testBackupSecurityInfo() {
        assertEquals(0x1000, SecurityInfo.BACKUP_SECURITY_INFO);

    void byteArrayConstructor_malformedDER_throwsWrapped() {
        // Arrange: Truncated SEQUENCE (0x30 len=2 but only 1 byte of content)
        byte[] malformed = new byte[] { 0x30, 0x02, 0x01 };

        // Act + Assert
        PACDecodingException ex = assertThrows(PACDecodingException.class, () -> new KerberosApRequest(malformed, null));

    private byte[] testMacSigningKey;

    @BeforeEach
    void setUp() {
        MockitoAnnotations.openMocks(this);
        testMacSigningKey = new byte[] { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F, 0x10 };
    }

    @Test
    @DisplayName("Test constructor with MAC signing key and bypass flag")
    void testConstructorWithBypass() {

            (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, // NextCommand
            (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, // MessageId
            (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, // Reserved / AsyncId
            (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, // TreeId / AsyncId

    int FLAGS_NO_PROPAGATE = 0x04;
    /**
     * Inheritance flag: ACE applies only to children, not to the object itself
     */
    int FLAGS_INHERIT_ONLY = 0x08;
    /**
     * Inheritance flag: ACE was inherited from parent
     */
    int FLAGS_INHERITED = 0x10;

    /**
     * Return the SID associated with this ACE.
     *
     * @return ACE target SID
     */
    SID getSID();

    /**

    /** Inheritance flag: ACE applies only to children, not to the object itself */
    public static final int FLAGS_INHERIT_ONLY = 0x08;
    /** Inheritance flag: ACE was inherited from parent */
    public static final int FLAGS_INHERITED = 0x10;

    boolean allow;
    int flags;
    int access;
    SID sid;

    /**