Current spec (section 6.1) has this field as "required". Since SETs produced by SSF may not always be signed, should this field be OPTIONAL instead?