As discussed, "preferred" is used for caching, so that we don't try and use a cached digest if we don't know which authentication type the HSS would return.