4. Recommended Ticket Construction

This section describes a recommended ticket construction mechanism. Implementations are encouraged to carefully consider the security implications of the ticket construction mechanism they choose. Tickets MUST be authenticated and encrypted to prevent modification and eavesdropping by an attacker.