Is it right to have a default here?  The default is actually only used in 1 of the 4 cases, and I think it would be clearer to always require it and so make sure developers explicitly choose whether the UAC should be dissociated.  Thoughts?