The flags return from ACCEPT-SEC incorrectly converted the time-rec value to flags instead of the ret-flags. This caused the return flags to be essentially random.