parsing su-apiserver descriptor correctly