pos += 4;
        return enc;
    }

    private static AvPair parseAvPair(final int avId, final byte[] raw) {
        return switch (avId) {
        case AvPair.MsvAvFlags -> new AvFlags(raw);
        case AvPair.MsvAvTimestamp -> new AvTimestamp(raw);
        case AvPair.MsvAvTargetName -> new AvTargetName(raw);
        case AvPair.MsvAvSingleHost -> new AvSingleHost(raw);

	github.com/jcmturner/gofork v1.7.6 // indirect
	github.com/jcmturner/gokrb5/v8 v8.4.4 // indirect
	github.com/jcmturner/rpc/v2 v2.0.3 // indirect
	github.com/jedib0t/go-pretty/v6 v6.6.7 // indirect
	github.com/jessevdk/go-flags v1.6.1 // indirect
	github.com/josharian/intern v1.0.0 // indirect
	github.com/juju/ratelimit v1.0.2 // indirect
	github.com/kr/fs v0.1.0 // indirect
	github.com/kylelemons/godebug v1.1.0 // indirect

pkg syscall (darwin-arm64), type Termios struct, Cflag uint64
pkg syscall (darwin-arm64), type Termios struct, Iflag uint64
pkg syscall (darwin-arm64), type Termios struct, Ispeed uint64
pkg syscall (darwin-arm64), type Termios struct, Lflag uint64
pkg syscall (darwin-arm64), type Termios struct, Oflag uint64
pkg syscall (darwin-arm64), type Termios struct, Ospeed uint64

		if len(b) > xioutil.DirectioAlignSize {
			r := bytes.NewReader(b)
			return s.writeAllDirect(ctx, filePath, r.Size(), r, flags, skipParent, true)
		}
		w, err = s.openFileSync(filePath, flags, skipParent)
	} else {
		w, err = s.openFile(filePath, flags, skipParent)
	}
	if err != nil {
		return err
	}

	_, err = w.Write(b)
	if err != nil {

        // Write Command = SMB2_IOCTL (0x000B) at offset 12
        SMBUtil.writeInt2(0x000B, hdr, 12);
        // Mark as server response to be realistic (optional)
        SMBUtil.writeInt4(0x00000001, hdr, 16); // Flags = SMB2_FLAGS_SERVER_TO_REDIR
        return hdr;
    }

    // Helper: build SMB2 IOCTL response body (without header) with structureSize=49

### kubeadm
* Quite a few flags been renamed or removed.  Those options that are removed as flags can still be accessed via the config file.  Most notably this includes external etcd settings and the option for setting the cloud provider on the API server.  The [kubeadm reference documentation](https://kubernetes.io/docs/admin/kubeadm/) is up to date with the new flags.

### Other Deprecations

        verify(treeConnection, times(2)).isSame(otherConn);
    }

    @Test
    @DisplayName("Buffer sizes and signing flags from negotiate response")
    void bufferSizesAndSigning() throws Exception {
        // Validate buffer sizes and signing flag are read from negotiate response
        SmbNegotiationResponse nego = mock(SmbNegotiationResponse.class);

or `/etc/sysconfig/kubelet`, depending on the system...

        // Setup server data for this scenario
        serverData.capabilities = 0; // No extended security
        serverData.encryptionKeyLength = 8;
        response.flags2 = ServerMessageBlock.FLAGS2_UNICODE;
        byte[] domainNameBytes = "DOMAIN_U".getBytes("UTF-16LE");
        response.byteCount = 8 + domainNameBytes.length + 2; // key + domain + null terminator

            assertEquals(status, echoResponse.getErrorCode());
        }
    }

    @Nested
    @DisplayName("Signed Flag Tests")
    class SignedFlagTests {

        @Test
        @DisplayName("Should detect signed flag")
        void testIsSigned() {
            assertFalse(echoResponse.isSigned());

            echoResponse.addFlags(ServerMessageBlock2.SMB2_FLAGS_SIGNED);