Is coaz:true required?

[tulshi]

From @maxwellgerber:

If x-coaz-mapping is required, do you still need the coaz: true field on the response?

[vatsalgupta]

I think it's required because in tool/list call if you see that coat:true is set for a tool only then the PEP should create an Authzen request. Open to other folks comments.